General
- Target 2026-10-25_d59e0eeb96505773bfd276d84a17b7ba_frostygoop_ghostlocker_glassworm_knight_luca-stealer_salatstealer_sliver
- Size 4.3MB
- Sample261026-m2p62aew4n
- SHA256 e9bf9cf4be9514e87671b23abaf1b8ba249e62bf39a649d3db554a13b7d50a7f
- MD5 d59e0eeb96505773bfd276d84a17b7ba
- SHA1 b882732a5ff85cf9eb39a0aff1a4897c728ba814
- SHA512 5de289f76fc8b151118dd2ed0ffc0e95f5735345b09e03c531df9f81c59b701c6ca8ceee7758531bb68811e056ac318671c825b8880bec77a94c591fe9f8eef9
- SSDEEP 49152:R3aIEYwOoFM0yxrOeRux6VLzpNV1Ugc2312dl7MCSH6gz/CtrxbWOcGp:RcSgi6CCt/p
- TLSH T187268C07FCA008AAC0AAA231C9A642527B71BC491B3263D72E50F77C2FB7BD45D79715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-25_d59e0eeb96505773bfd276d84a17b7ba_frostygoop_ghostlocker_glassworm_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-25_d59e0eeb96505773bfd276d84a17b7ba_frostygoop_ghostlocker_glassworm_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-25_d59e0eeb96505773bfd276d84a17b7ba_frostygoop_ghostlocker_glassworm_knight_luca-stealer_salatstealer_sliver
- Size 4.3MB
- SHA256 e9bf9cf4be9514e87671b23abaf1b8ba249e62bf39a649d3db554a13b7d50a7f
- MD5 d59e0eeb96505773bfd276d84a17b7ba
- SHA1 b882732a5ff85cf9eb39a0aff1a4897c728ba814
- SHA512 5de289f76fc8b151118dd2ed0ffc0e95f5735345b09e03c531df9f81c59b701c6ca8ceee7758531bb68811e056ac318671c825b8880bec77a94c591fe9f8eef9
- SSDEEP 49152:R3aIEYwOoFM0yxrOeRux6VLzpNV1Ugc2312dl7MCSH6gz/CtrxbWOcGp:RcSgi6CCt/p
- TLSH T187268C07FCA008AAC0AAA231C9A642527B71BC491B3263D72E50F77C2FB7BD45D79715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DarkSideRAT
-
Suspicious use of SetThreadContext