General
- Target 2026-07-31_8cea99dc1e0dd401e97c8527a8f288d2_elex_frostygoop_hive_salatstealer_sliver_snatch
- Size 2.5MB
- Sample260731-dbgyasscrc
- SHA256 8804ca2408f5fad535dc57f0400af5d054d31d6c0e66de0d61a9e95cc55c3dd2
- MD5 8cea99dc1e0dd401e97c8527a8f288d2
- SHA1 f6aed15bfcd5b4d3131d37b51cec5f79db769a09
- SHA512 b7ab95363361ade9c030f079cb295a49775f54afdbdb9f6d4fd43f047619eefdb2edcceb010aa166a57255fdf0893eb1a9b3561609e56d136a04882185fa1705
- SSDEEP 24576:9YUxXK8JYg/LwQxlQa86rpb+PVAMDN1V9mFVey5ihYo5q9ZtCnAyAzreuRg09pPc:9FxZSa/LymreuP+bsxEJqe
- TLSH T145C56C10FEC744F1E803263254A762AF33396D051F36DB97EE583AB9F977291182670A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_8cea99dc1e0dd401e97c8527a8f288d2_elex_frostygoop_hive_salatstealer_sliver_snatch.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_8cea99dc1e0dd401e97c8527a8f288d2_elex_frostygoop_hive_salatstealer_sliver_snatch
- Size 2.5MB
- SHA256 8804ca2408f5fad535dc57f0400af5d054d31d6c0e66de0d61a9e95cc55c3dd2
- MD5 8cea99dc1e0dd401e97c8527a8f288d2
- SHA1 f6aed15bfcd5b4d3131d37b51cec5f79db769a09
- SHA512 b7ab95363361ade9c030f079cb295a49775f54afdbdb9f6d4fd43f047619eefdb2edcceb010aa166a57255fdf0893eb1a9b3561609e56d136a04882185fa1705
- SSDEEP 24576:9YUxXK8JYg/LwQxlQa86rpb+PVAMDN1V9mFVey5ihYo5q9ZtCnAyAzreuRg09pPc:9FxZSa/LymreuP+bsxEJqe
- TLSH T145C56C10FEC744F1E803263254A762AF33396D051F36DB97EE583AB9F977291182670A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
3Credentials In Files
3