General
- Target 2026-10-01_81521355c32b7613ab95fda30dfb2fac_frostygoop_glassworm_hive_luca-stealer_salatstealer_sliver
- Size 94.5MB
- Sample261003-yrbfnswfph
- SHA256 f4bf51b120c7e6dedfde9304e2d0c1d25ce40b2476de82bce603a4c02d99023b
- MD5 81521355c32b7613ab95fda30dfb2fac
- SHA1 45d6f639b066a6962167e38b242ffa8de6b8d498
- SHA512 2a8aaaa2c431d6b58c5bfc0ca3b06476140f9e79e20c7d4d225a13cd731af87d085f8a0ce95a7ce22db94be1321f59f5423eb6babfe9cfde43884aeda91e8698
- SSDEEP 1572864:UAiz/oRhPg7gbpkF834++sQxJpEVXqCS6CKMjNR93Q/q8nGvoRoe/sz2RaGk4uw6:Oz/mhPgMSF29AEVqjK6NngSCDlsz2Ral
- TLSH T16B2833463D85D0AAD4ABAF3946B65660B2607448C73423EF2F90A5781E773D38E3FB14
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-01_81521355c32b7613ab95fda30dfb2fac_frostygoop_glassworm_hive_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-01_81521355c32b7613ab95fda30dfb2fac_frostygoop_glassworm_hive_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
vidar
Version
-
3.5
Botnet
-
bb3047f28f5a6958d5fc49e6fb8d6125
C2
-
https://172.236.206.42
-
https://telegram.me/nts33p
-
https://community.fandom.com/wikia.php?controller=UserProfile&method=getUserData&format=json&userId=64140772
-
https://steamcommunity.com/profiles/76561198639924729
Attributes
-
user_agent
Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/150.0.0.0 YaBrowser/26.8.0.0
Targets
-
- Target 2026-10-01_81521355c32b7613ab95fda30dfb2fac_frostygoop_glassworm_hive_luca-stealer_salatstealer_sliver
- Size 94.5MB
- SHA256 f4bf51b120c7e6dedfde9304e2d0c1d25ce40b2476de82bce603a4c02d99023b
- MD5 81521355c32b7613ab95fda30dfb2fac
- SHA1 45d6f639b066a6962167e38b242ffa8de6b8d498
- SHA512 2a8aaaa2c431d6b58c5bfc0ca3b06476140f9e79e20c7d4d225a13cd731af87d085f8a0ce95a7ce22db94be1321f59f5423eb6babfe9cfde43884aeda91e8698
- SSDEEP 1572864:UAiz/oRhPg7gbpkF834++sQxJpEVXqCS6CKMjNR93Q/q8nGvoRoe/sz2RaGk4uw6:Oz/mhPgMSF29AEVqjK6NngSCDlsz2Ral
- TLSH T16B2833463D85D0AAD4ABAF3946B65660B2607448C73423EF2F90A5781E773D38E3FB14
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Windows executables referencing non-Windows User-Agents