General
- Target 2026-11-08_8a58e1724c302714558b9f460774db2a_frostygoop_ghostlocker_luca-stealer_salatstealer_sliver
- Size 2.5MB
- Sample261109-aezqqsst8n
- SHA256 3aef2a565f625d78f319fc6e7acb55c5dd26f84e89f82445d0badbd026bf6e73
- MD5 8a58e1724c302714558b9f460774db2a
- SHA1 de043e779bb7c584d4a69db78802b2dd963ae5fe
- SHA512 fd6c3ad875776c2931274ebe4f1d37d795757977aa740a3603377f14fdaf958a6424e9a3fd1b0484cee0924ff2a5ae94c77e2704e7ae5a888354d00345a952c5
- SSDEEP 49152:MLq8qCnln6OEnfhtUQpldSD+BefzCymi3TIu2:mEZlSIYCvG
- TLSH T1A9C57E07BCD414B9D0AA93328EB692927771BC891F3223D72A90B67C3F76BD05A35744
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-08_8a58e1724c302714558b9f460774db2a_frostygoop_ghostlocker_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-08_8a58e1724c302714558b9f460774db2a_frostygoop_ghostlocker_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-08_8a58e1724c302714558b9f460774db2a_frostygoop_ghostlocker_luca-stealer_salatstealer_sliver
- Size 2.5MB
- SHA256 3aef2a565f625d78f319fc6e7acb55c5dd26f84e89f82445d0badbd026bf6e73
- MD5 8a58e1724c302714558b9f460774db2a
- SHA1 de043e779bb7c584d4a69db78802b2dd963ae5fe
- SHA512 fd6c3ad875776c2931274ebe4f1d37d795757977aa740a3603377f14fdaf958a6424e9a3fd1b0484cee0924ff2a5ae94c77e2704e7ae5a888354d00345a952c5
- SSDEEP 49152:MLq8qCnln6OEnfhtUQpldSD+BefzCymi3TIu2:mEZlSIYCvG
- TLSH T1A9C57E07BCD414B9D0AA93328EB692927771BC891F3223D72A90B67C3F76BD05A35744
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects DarkSideRAT
Suspicious use of SetThreadContext