General
- Target 2026-11-06_d77b83d5895e0d850aa9dc7f6dc9d417_frostygoop_ghostlocker_knight_luca-stealer_salatstealer_sliver
- Size 2.9MB
- Sample261107-1wa2tagc86
- SHA256 bec1d846e97a49538e6b5a7c029c504ed9459dd954d7f667b4b0d2981d8988fd
- MD5 d77b83d5895e0d850aa9dc7f6dc9d417
- SHA1 8a4d5f0563c98945e869b672c65a041670da047f
- SHA512 121befb215d77a000087e8b8cf46333709a6894526309c1ac1879f8d79a3cd37a3a8e8596c121e33a8beb7425efc61819e3b977c49fa3e45ade95e3e3b92fb01
- SSDEEP 49152:uPOfH9WOn50HiGRORh75RmttSeDvAfPOaKnOv:uMnRm7Se7AfPTKn
- TLSH T1DDD58D57BCE108E6C0AA9731CAA291927B75BC490F3227D77E90B3382FB3AD05975744
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-06_d77b83d5895e0d850aa9dc7f6dc9d417_frostygoop_ghostlocker_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-06_d77b83d5895e0d850aa9dc7f6dc9d417_frostygoop_ghostlocker_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-06_d77b83d5895e0d850aa9dc7f6dc9d417_frostygoop_ghostlocker_knight_luca-stealer_salatstealer_sliver
- Size 2.9MB
- SHA256 bec1d846e97a49538e6b5a7c029c504ed9459dd954d7f667b4b0d2981d8988fd
- MD5 d77b83d5895e0d850aa9dc7f6dc9d417
- SHA1 8a4d5f0563c98945e869b672c65a041670da047f
- SHA512 121befb215d77a000087e8b8cf46333709a6894526309c1ac1879f8d79a3cd37a3a8e8596c121e33a8beb7425efc61819e3b977c49fa3e45ade95e3e3b92fb01
- SSDEEP 49152:uPOfH9WOn50HiGRORh75RmttSeDvAfPOaKnOv:uMnRm7Se7AfPTKn
- TLSH T1DDD58D57BCE108E6C0AA9731CAA291927B75BC490F3227D77E90B3382FB3AD05975744
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects DarkSideRAT
Suspicious use of SetThreadContext