General
- Target 2026-10-05_d7e3434399106fd74ea8c5cc6e019f92_frostygoop_glassworm_hive_luca-stealer_salatstealer_sliver
- Size 5.6MB
- Sample261006-tktapafe52
- SHA256 9b437da8f1af7e9a4f94592368cfadeb9505da4b175b3cca53c0c18b0a898ae8
- MD5 d7e3434399106fd74ea8c5cc6e019f92
- SHA1 251ece6765b112301205d4f132b6f8532120adb3
- SHA512 df1aff1e2a9aead8cabc51e1d8a3ccc0da820c6376d5dffdcc9a88ff277fc6c57940b121cd65a4abb078cb11924c1b705eb3ae982821cc8b106a7b24624de4e3
- SSDEEP 49152:TuXA45UnYR9ntqjp0sXEKgufeePafFrzss+6Zi/sPiGz2c5VY43CwD8S18/iwMOB:eeSF18INs
- TLSH T149562913728850ECC54BE37145B16B6A26F13C9E9232774B4FA5BEA02F267D52FB4B04
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-05_d7e3434399106fd74ea8c5cc6e019f92_frostygoop_glassworm_hive_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-05_d7e3434399106fd74ea8c5cc6e019f92_frostygoop_glassworm_hive_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-05_d7e3434399106fd74ea8c5cc6e019f92_frostygoop_glassworm_hive_luca-stealer_salatstealer_sliver
- Size 5.6MB
- SHA256 9b437da8f1af7e9a4f94592368cfadeb9505da4b175b3cca53c0c18b0a898ae8
- MD5 d7e3434399106fd74ea8c5cc6e019f92
- SHA1 251ece6765b112301205d4f132b6f8532120adb3
- SHA512 df1aff1e2a9aead8cabc51e1d8a3ccc0da820c6376d5dffdcc9a88ff277fc6c57940b121cd65a4abb078cb11924c1b705eb3ae982821cc8b106a7b24624de4e3
- SSDEEP 49152:TuXA45UnYR9ntqjp0sXEKgufeePafFrzss+6Zi/sPiGz2c5VY43CwD8S18/iwMOB:eeSF18INs
- TLSH T149562913728850ECC54BE37145B16B6A26F13C9E9232774B4FA5BEA02F267D52FB4B04
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Executes dropped EXE
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Suspicious use of SetThreadContext