General
- Target 2026-07-29_ec6b50ffde351c42d208ad5063f771e9_elex_frostygoop_hive_salatstealer_sliver
- Size 2.3MB
- Sample260729-cvfc5ser9s
- SHA256 81dae3ab5072a2ca8f147f611a76a01321e6a7991f47243d8fb4a8e892ac4e8f
- MD5 ec6b50ffde351c42d208ad5063f771e9
- SHA1 ecf35a78af6cb7eb4cd1e2907400190348ac1603
- SHA512 9ab30043330c4f48ab7daf3904c73fc5b7a715d0eafd1e4306db1b09bd9bc268ee4802d23037b4ebab4ab77e1b69f8d87e8a5937f29f186473c5746a76c9b3fb
- SSDEEP 24576:Wejg+tbMTg/Ld2PoawDSnVOkaiMGeVy33HpG9GBE1sPudbm1Ffs1GUHXN7P4NfEt:WMg9dwAkKY1sp1FfuGU3N7AFENbQQIs
- TLSH T130B56A04FD9744F6E807563198A7A2AF2335AD050F33DBA7EA047A79F9B72950933309
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-29_ec6b50ffde351c42d208ad5063f771e9_elex_frostygoop_hive_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_ec6b50ffde351c42d208ad5063f771e9_elex_frostygoop_hive_salatstealer_sliver
- Size 2.3MB
- SHA256 81dae3ab5072a2ca8f147f611a76a01321e6a7991f47243d8fb4a8e892ac4e8f
- MD5 ec6b50ffde351c42d208ad5063f771e9
- SHA1 ecf35a78af6cb7eb4cd1e2907400190348ac1603
- SHA512 9ab30043330c4f48ab7daf3904c73fc5b7a715d0eafd1e4306db1b09bd9bc268ee4802d23037b4ebab4ab77e1b69f8d87e8a5937f29f186473c5746a76c9b3fb
- SSDEEP 24576:Wejg+tbMTg/Ld2PoawDSnVOkaiMGeVy33HpG9GBE1sPudbm1Ffs1GUHXN7P4NfEt:WMg9dwAkKY1sp1FfuGU3N7AFENbQQIs
- TLSH T130B56A04FD9744F6E807563198A7A2AF2335AD050F33DBA7EA047A79F9B72950933309
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
3Credentials In Files
3