Analysis
- max time kernel
149s - max time network
140s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
27/10/2026, 04:32
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-26_e2061f0acf46615c68513682d460d50c_frostygoop_ghostlocker_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260911-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-26_e2061f0acf46615c68513682d460d50c_frostygoop_ghostlocker_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260911-en
0 signatures
150 seconds
General
- Target 2026-10-26_e2061f0acf46615c68513682d460d50c_frostygoop_ghostlocker_hive_knight_luca-stealer_salatstealer_sliver.exe
- Size 3.1MB
- Sample261027-e553nays7q
- SHA256 b6652efd2dc8a93c43dec0550c3458b616717c4fb41980a0fba1e7e01af11a0c
- MD5 e2061f0acf46615c68513682d460d50c
- SHA1 bf7e6d59346b702cd8c801b5cec96512332b77b6
- SHA512 632c3fea081e90bb20a7b17ec60a161b765b2fd8830a2122ef2c7f6b4e9633b71bc444b82c3e12400e405267a7e0b1373c43cd11a36bc4f370dedab7759b526b
- SSDEEP 49152:0FwhcdYnSjZLpNG1pmPWYWV+iG8rH0WOlSnEei8xX:06WGpLVrHtEei8V
- TLSH T1FFE56C07BCA109EAC0AAA37189A691867B75BC490F3223D72E50B73C3F72BD05D79754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-10-26_e2061f0acf46615c68513682d460d50c_frostygoop_ghostlocker_hive_knight_luca-stealer_salatstealer_sliver.exe"C:\Users\Admin\AppData\Local\Temp\2026-10-26_e2061f0acf46615c68513682d460d50c_frostygoop_ghostlocker_hive_knight_luca-stealer_salatstealer_sliver.exe"1⤵PID:3868
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\io.takina.gtfo.skins.Tron.alt\6634b945-e426-4133-abd8-c4cdf68b3caf.tmp
- Size 157KB
- SHA256 e03138d37406c2bedec93e5a7c44a457a6b19cf4fee5dfe5a46450fcea1bf85e
- MD5 088d09e1a5cd1db2f55a4f5131b75b3b
- SHA1 4e017079555c92f2f9419a53ab89aae7c5425550
- SHA512 f8e7a1652d20778af9e0aefef0f24bb477260eefd5c6cecd3b4e17276b7d6c8d79554e850b9a9fdd9c65095ae16dad8868df304ee7a057ec7cea5a35b9e526ad
- SSDEEP 3072:sA30KAb7L7nAnBPxnb8b4HpQgHY15vClaH4d6r1tx:sAkKAb7L0Qb4HpQgoq8tx
- TLSH T182F3E1AD2FEE891ACD0B50BD3B04B38BC90A8F07820A655F735F8015997475D17A2DFA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\io.takina.gtfo.skins.Tron.alt\wctFC77.tmp
- Size 63KB
- SHA256 543796a1b343b4ebc0285d89cb8eb70667ac7b513da37495e38003704e9d88d7
- MD5 e516a60bc980095e8d156b1a99ab5eee
- SHA1 238e243ffc12d4e012fd020c9822703109b987f6
- SHA512 9b51e99ba20e9da56d1acc24a1cf9f9c9dbdeb742bec034e0ff2bc179a60f4aff249f40344f9ddd43229dcdefa1041940f65afb336d46c175ffeff725c638d58
- SSDEEP 384:poaSLGTSy3S0XuMU9mCzHS7vpvpJGV6Hu/i49Pji7iJI5TZCP56vS1xDR+dBUFvT:WryF7U9mCzHS7vu/xV2iP56vcDR+P0T
- TLSH T18A53DD9E2108B66FE215AD5A7EABA9861C31746E3842CFCDF1CDC26C5F40DC4334A5A7
- MD5 SHA1 SHA512 SSDEEP TLSH