General
- Target 2026-11-12_2f0950196095f26901aa079c4e0e3f92_frostygoop_glassworm_hive_luca-stealer_salatstealer_sliver
- Size 3.6MB
- Sample261113-grslhsf18y
- SHA256 e7b2b38ee0855e11c4661d838fc151d908adcf157bbdc014c2379f112fa40cff
- MD5 2f0950196095f26901aa079c4e0e3f92
- SHA1 ad0cae4c7a3b23ffc5bb57db1b629a5961cdb84d
- SHA512 bc12963a07e10cbc80520821f172060afb9c437fb13c159d55850826bfa5f975848a0f95989cf4becdaee97a8f02525ad0c3f33db15d9d9db6045870685dc07d
- SSDEEP 49152:QkYuHSexOS/1S/CuzbWf3CscXtJqPancIzp/XHepgArIg3Om:bVxkGStJqucyp/XAcuP
- TLSH T185068D077C9086A9C066EB3586A782527B317C88973133C72FD1B6742F76BD12D7AB18
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-12_2f0950196095f26901aa079c4e0e3f92_frostygoop_glassworm_hive_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260911-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-12_2f0950196095f26901aa079c4e0e3f92_frostygoop_glassworm_hive_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-12_2f0950196095f26901aa079c4e0e3f92_frostygoop_glassworm_hive_luca-stealer_salatstealer_sliver
- Size 3.6MB
- SHA256 e7b2b38ee0855e11c4661d838fc151d908adcf157bbdc014c2379f112fa40cff
- MD5 2f0950196095f26901aa079c4e0e3f92
- SHA1 ad0cae4c7a3b23ffc5bb57db1b629a5961cdb84d
- SHA512 bc12963a07e10cbc80520821f172060afb9c437fb13c159d55850826bfa5f975848a0f95989cf4becdaee97a8f02525ad0c3f33db15d9d9db6045870685dc07d
- SSDEEP 49152:QkYuHSexOS/1S/CuzbWf3CscXtJqPancIzp/XHepgArIg3Om:bVxkGStJqucyp/XAcuP
- TLSH T185068D077C9086A9C066EB3586A782527B317C88973133C72FD1B6742F76BD12D7AB18
- MD5 SHA1 SHA512 SSDEEP TLSH
Accesses cryptocurrency files/wallets, possible credential harvesting
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
Suspicious use of SetThreadContext