General
- Target 2026-07-06_9fdb7b21b17b297932d737d960904a8f_elex_frostygoop_hive_salatstealer_sliver
- Size 2.1MB
- Sample260707-cckvxacx5m
- SHA256 8a3910497d0b54177c36cea1a6eeadc420ce5ce41889d8f9009e4d178f14334d
- MD5 9fdb7b21b17b297932d737d960904a8f
- SHA1 183eda0abc480d24070329340aecccdcbdee7d29
- SHA512 1d737fceac6e801287c596f5528bac14bac1712ed911db8fe4aa3b514efc31fb6c0d284faa9b1b154eae30da990977c5abedce92580a02a402a6416f28e1dbea
- SSDEEP 24576:FqEwZkKHLIrhg/LQHSpqdPRBHJ+pvicxx3DcO+/IogRkmiEb8Tsz5mLQ/8l6l8o4:FrKtJoPoiER3/8lYYbsJ5M
- TLSH T110A54901EDC755B6E406163284E762BF2335AD090F32DB87FA847AB9FA772D10936349
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_9fdb7b21b17b297932d737d960904a8f_elex_frostygoop_hive_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_9fdb7b21b17b297932d737d960904a8f_elex_frostygoop_hive_salatstealer_sliver
- Size 2.1MB
- SHA256 8a3910497d0b54177c36cea1a6eeadc420ce5ce41889d8f9009e4d178f14334d
- MD5 9fdb7b21b17b297932d737d960904a8f
- SHA1 183eda0abc480d24070329340aecccdcbdee7d29
- SHA512 1d737fceac6e801287c596f5528bac14bac1712ed911db8fe4aa3b514efc31fb6c0d284faa9b1b154eae30da990977c5abedce92580a02a402a6416f28e1dbea
- SSDEEP 24576:FqEwZkKHLIrhg/LQHSpqdPRBHJ+pvicxx3DcO+/IogRkmiEb8Tsz5mLQ/8l6l8o4:FrKtJoPoiER3/8lYYbsJ5M
- TLSH T110A54901EDC755B6E406163284E762BF2335AD090F32DB87FA847AB9FA772D10936349
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
3Credentials In Files
3