General
- Target 2026-11-13_7589110dc23491726b84e6bfb3ed26b3_cobalt-strike_frostygoop_ghostlocker_luca-stealer_salatstealer_sliver
- Size 3.0MB
- Sample261114-msph5syv9r
- SHA256 3470cdd248ba37e4403e8515bf03ef8afa05ab33b2c4babf44fa60a7052a461c
- MD5 7589110dc23491726b84e6bfb3ed26b3
- SHA1 59a3882b58059c3afc00c6058467f5926e222224
- SHA512 858f007261e866efef8303e0c2d8fd563a9c3aec20b16a02590aa4a6427b55a722e6eea100bb9b4af877885be2faeaea9b9a7b7ed0ffd40d0729b8d5b5d9a9e6
- SSDEEP 49152:NqUla4S6Yrb/T1vO90d7HjmAFd4A64nsfJQ9FWgWViLrOHPRkq1HILzTRc+4Ki1a:c44S/IH1cN1a
- TLSH T177E57B47BC9594A5C8EAD231897582927B30BC890F3167D33B10BBBA2B73BD45E39354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-13_7589110dc23491726b84e6bfb3ed26b3_cobalt-strike_frostygoop_ghostlocker_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-13_7589110dc23491726b84e6bfb3ed26b3_cobalt-strike_frostygoop_ghostlocker_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-13_7589110dc23491726b84e6bfb3ed26b3_cobalt-strike_frostygoop_ghostlocker_luca-stealer_salatstealer_sliver
- Size 3.0MB
- SHA256 3470cdd248ba37e4403e8515bf03ef8afa05ab33b2c4babf44fa60a7052a461c
- MD5 7589110dc23491726b84e6bfb3ed26b3
- SHA1 59a3882b58059c3afc00c6058467f5926e222224
- SHA512 858f007261e866efef8303e0c2d8fd563a9c3aec20b16a02590aa4a6427b55a722e6eea100bb9b4af877885be2faeaea9b9a7b7ed0ffd40d0729b8d5b5d9a9e6
- SSDEEP 49152:NqUla4S6Yrb/T1vO90d7HjmAFd4A64nsfJQ9FWgWViLrOHPRkq1HILzTRc+4Ki1a:c44S/IH1cN1a
- TLSH T177E57B47BC9594A5C8EAD231897582927B30BC890F3167D33B10BBBA2B73BD45E39354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects DarkSideRAT
Suspicious use of SetThreadContext