General
- Target 2026-11-08_87d6773425f58e7ef71d6511f6644046_frostygoop_ghostlocker_luca-stealer_salatstealer_sliver
- Size 2.5MB
- Sample261109-akxtbsgs3m
- SHA256 1eec0f7138afff41e25cf2507dd848a50564a4bc59357b3a63f818526f0bf4be
- MD5 87d6773425f58e7ef71d6511f6644046
- SHA1 22c8eb9cc6e7fbc149ded18f3d852e41ca9fad96
- SHA512 31d6a4fae07dfa4280a3601bdb97b26dd78654fccaa557400a40f81496bd06ba989081af10279e634746b64af7a4892c4e761f9ec8fa1cf022e236fa8c7bb838
- SSDEEP 49152:8Lq8qCnln6OEnfhtUQpldSD+BefzCymi3TIu2:2EZlSIYCvG
- TLSH T133C57E07BCD414B9D0AA93328EB692927771BC891F3223D72A90B67C3F76BD05A35744
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-08_87d6773425f58e7ef71d6511f6644046_frostygoop_ghostlocker_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-08_87d6773425f58e7ef71d6511f6644046_frostygoop_ghostlocker_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-08_87d6773425f58e7ef71d6511f6644046_frostygoop_ghostlocker_luca-stealer_salatstealer_sliver
- Size 2.5MB
- SHA256 1eec0f7138afff41e25cf2507dd848a50564a4bc59357b3a63f818526f0bf4be
- MD5 87d6773425f58e7ef71d6511f6644046
- SHA1 22c8eb9cc6e7fbc149ded18f3d852e41ca9fad96
- SHA512 31d6a4fae07dfa4280a3601bdb97b26dd78654fccaa557400a40f81496bd06ba989081af10279e634746b64af7a4892c4e761f9ec8fa1cf022e236fa8c7bb838
- SSDEEP 49152:8Lq8qCnln6OEnfhtUQpldSD+BefzCymi3TIu2:2EZlSIYCvG
- TLSH T133C57E07BCD414B9D0AA93328EB692927771BC891F3223D72A90B67C3F76BD05A35744
- MD5 SHA1 SHA512 SSDEEP TLSH
Detects DarkSideRAT
Suspicious use of SetThreadContext