Analysis

  • max time kernel
    149s
  • max time network
    140s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    27/10/2026, 04:32

General

  • Target
    2026-10-26_e2061f0acf46615c68513682d460d50c_frostygoop_ghostlocker_hive_knight_luca-stealer_salatstealer_sliver.exe
  • Size 3.1MB
  • Sample261027-e553nays7q
  • SHA256 b6652efd2dc8a93c43dec0550c3458b616717c4fb41980a0fba1e7e01af11a0c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-10-26_e2061f0acf46615c68513682d460d50c_frostygoop_ghostlocker_hive_knight_luca-stealer_salatstealer_sliver.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-10-26_e2061f0acf46615c68513682d460d50c_frostygoop_ghostlocker_hive_knight_luca-stealer_salatstealer_sliver.exe"
    1⤵
      PID:3868

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          6634b945-e426-4133-abd8-c4cdf68b3caf.tmp

          • Path C:\Users\Admin\AppData\Local\io.takina.gtfo.skins.Tron.alt\6634b945-e426-4133-abd8-c4cdf68b3caf.tmp
          • Size 157KB
          • SHA256 e03138d37406c2bedec93e5a7c44a457a6b19cf4fee5dfe5a46450fcea1bf85e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          wctFC77.tmp

          • Path C:\Users\Admin\AppData\Local\io.takina.gtfo.skins.Tron.alt\wctFC77.tmp
          • Size 63KB
          • SHA256 543796a1b343b4ebc0285d89cb8eb70667ac7b513da37495e38003704e9d88d7
          • MD5 SHA1 SHA512 SSDEEP TLSH