General
- Target 2026-11-11_394866182db86ca793e8a549eead8b8e_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 6.7MB
- Sample261113-rlpyjsww7n
- SHA256 ce2b52fab8037555d3eab437cd7e49c0df3530ed41aece81c84a23b18b791e27
- MD5 394866182db86ca793e8a549eead8b8e
- SHA1 c7c54348f90906779d28a6aa40815fdea80bcc08
- SHA512 32132abc68baab153350fb58b3fd438a3eb33ebcc832329438fca529814bd5ac80bc34845ba3c6e75b766c2af751b49c83fa53011f1619765577410ad9a15ce4
- SSDEEP 49152:GsVO6eAwaD0S2SvgTECKG6kYXmei8iP1FAyEM+RclxuTb21TJj9Q3Ek:G2InX8idFAycelyItyJ
- TLSH T1AC662813BB9402A0D0559334C06AD233BA74BC8D973676D3AED46C6A3F2E7D176B6B04
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-11_394866182db86ca793e8a549eead8b8e_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-11_394866182db86ca793e8a549eead8b8e_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-11_394866182db86ca793e8a549eead8b8e_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 6.7MB
- SHA256 ce2b52fab8037555d3eab437cd7e49c0df3530ed41aece81c84a23b18b791e27
- MD5 394866182db86ca793e8a549eead8b8e
- SHA1 c7c54348f90906779d28a6aa40815fdea80bcc08
- SHA512 32132abc68baab153350fb58b3fd438a3eb33ebcc832329438fca529814bd5ac80bc34845ba3c6e75b766c2af751b49c83fa53011f1619765577410ad9a15ce4
- SSDEEP 49152:GsVO6eAwaD0S2SvgTECKG6kYXmei8iP1FAyEM+RclxuTb21TJj9Q3Ek:G2InX8idFAycelyItyJ
- TLSH T1AC662813BB9402A0D0559334C06AD233BA74BC8D973676D3AED46C6A3F2E7D176B6B04
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.