General
- Target 2026-07-31_3d1990f5192d432c5e917bd3687285e9_elex_frostygoop_hive_salatstealer_sliver_snatch
- Size 2.3MB
- Sample260731-dscpxavwcv
- SHA256 7cb4430dc42968aa4a68fbd83d09838816e5cdee86f6f3c0712e59158dc1c4fc
- MD5 3d1990f5192d432c5e917bd3687285e9
- SHA1 0872fba791089fbba367df46cc1a796701ddb7fe
- SHA512 345c36594426bd2286c0218f8fd3164ba9f779739967516bf137d68c30f045c0db5b7cfe9d7f5b1f41a1fc49696854f7fc39f28efd3d3500dfe85e15df947dee
- SSDEEP 24576:7SM/iFppdQg/LbCZq6/Aee991WAkpZYmAFB3nFDApNBxks7Dqh6bi5hbkVjk3iR/:7D/YIX/wxKrWIDqfgVQla/ENbsxEJG
- TLSH T13AB56B01FED745F2E803123154A762BF2339AD085F32EB97EE547A79BA732D14822749
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_3d1990f5192d432c5e917bd3687285e9_elex_frostygoop_hive_salatstealer_sliver_snatch.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_3d1990f5192d432c5e917bd3687285e9_elex_frostygoop_hive_salatstealer_sliver_snatch
- Size 2.3MB
- SHA256 7cb4430dc42968aa4a68fbd83d09838816e5cdee86f6f3c0712e59158dc1c4fc
- MD5 3d1990f5192d432c5e917bd3687285e9
- SHA1 0872fba791089fbba367df46cc1a796701ddb7fe
- SHA512 345c36594426bd2286c0218f8fd3164ba9f779739967516bf137d68c30f045c0db5b7cfe9d7f5b1f41a1fc49696854f7fc39f28efd3d3500dfe85e15df947dee
- SSDEEP 24576:7SM/iFppdQg/LbCZq6/Aee991WAkpZYmAFB3nFDApNBxks7Dqh6bi5hbkVjk3iR/:7D/YIX/wxKrWIDqfgVQla/ENbsxEJG
- TLSH T13AB56B01FED745F2E803123154A762BF2339AD085F32EB97EE547A79BA732D14822749
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
3Credentials In Files
3