General
- Target 2026-06-26_22bf946b318769295f84794f61f5ecb4_elex_frostygoop_hive_salatstealer_sliver_snatch
- Size 2.8MB
- Sample260629-v56xysay2v
- SHA256 bba9ec10fa45aa9f1fd703a78a8bbd0472fc7614ccbdde22279b5ef57bde2ea1
- MD5 22bf946b318769295f84794f61f5ecb4
- SHA1 4a0d66aa52ba7081d069c1c02bc691286b7071c5
- SHA512 ba0fa6b56f79befe74c2c90e6040d13ad6d3759ac483ecc34117609f643fcc1fe77d7096819ff7acecd8e62c8962d763767404583be138f9e8a5932f439b3e5f
- SSDEEP 49152:wY9cBjAmY56pQCaIC/60IboK41JkRPDjnE5MbsJVA:DiBjAmY5hIC/60IboK41JkRPsJ
- TLSH T15AD57C40ACF3D5B1D802363554E762AF2225680FAF7ECA93D6762779AF7E190142B3C4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-26_22bf946b318769295f84794f61f5ecb4_elex_frostygoop_hive_salatstealer_sliver_snatch.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-26_22bf946b318769295f84794f61f5ecb4_elex_frostygoop_hive_salatstealer_sliver_snatch.exe
Resource
win11ltsc2024-20260629-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-26_22bf946b318769295f84794f61f5ecb4_elex_frostygoop_hive_salatstealer_sliver_snatch
- Size 2.8MB
- SHA256 bba9ec10fa45aa9f1fd703a78a8bbd0472fc7614ccbdde22279b5ef57bde2ea1
- MD5 22bf946b318769295f84794f61f5ecb4
- SHA1 4a0d66aa52ba7081d069c1c02bc691286b7071c5
- SHA512 ba0fa6b56f79befe74c2c90e6040d13ad6d3759ac483ecc34117609f643fcc1fe77d7096819ff7acecd8e62c8962d763767404583be138f9e8a5932f439b3e5f
- SSDEEP 49152:wY9cBjAmY56pQCaIC/60IboK41JkRPDjnE5MbsJVA:DiBjAmY5hIC/60IboK41JkRPsJ
- TLSH T15AD57C40ACF3D5B1D802363554E762AF2225680FAF7ECA93D6762779AF7E190142B3C4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of NtSetInformationThreadHideFromDebugger