General
- Target 2026-08-01_25fb1da9d73406a8e2cfc064e12f1986_elex_frostygoop_glassworm_hive_salatstealer_sliver_snatch
- Size 2.6MB
- Sample260801-d66vxadp5s
- SHA256 49115ed0c251a2c9f52ab6848124437c3642c8e31ff448b9c275f976d25cc6c7
- MD5 25fb1da9d73406a8e2cfc064e12f1986
- SHA1 e8b4f8623219264482ff0325f4a4dcc5608e07a0
- SHA512 549be2cf253831cae2c4a5a5350036b8a01f1230f10c6b767c23cc3e67c3f725b2905c58b60b558089a7832063b6fe12fe23c47ba796b8ebf6b6636ae033f3ef
- SSDEEP 24576:kxonD1WyJg/LwBBSFlB7GhcpVLZXSDu1a3qi7b1mxR1sc1OeEPu3rjDgbY/GAGPt:kGn1Mlkc/0u3V9BNTbXpx85LURbsJfi2
- TLSH T165D53A11FEC784F6D403563159A7A2AF633ABD050F359B87EF443BB9EA772950832209
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_25fb1da9d73406a8e2cfc064e12f1986_elex_frostygoop_glassworm_hive_salatstealer_sliver_snatch.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_25fb1da9d73406a8e2cfc064e12f1986_elex_frostygoop_glassworm_hive_salatstealer_sliver_snatch
- Size 2.6MB
- SHA256 49115ed0c251a2c9f52ab6848124437c3642c8e31ff448b9c275f976d25cc6c7
- MD5 25fb1da9d73406a8e2cfc064e12f1986
- SHA1 e8b4f8623219264482ff0325f4a4dcc5608e07a0
- SHA512 549be2cf253831cae2c4a5a5350036b8a01f1230f10c6b767c23cc3e67c3f725b2905c58b60b558089a7832063b6fe12fe23c47ba796b8ebf6b6636ae033f3ef
- SSDEEP 24576:kxonD1WyJg/LwBBSFlB7GhcpVLZXSDu1a3qi7b1mxR1sc1OeEPu3rjDgbY/GAGPt:kGn1Mlkc/0u3V9BNTbXpx85LURbsJfi2
- TLSH T165D53A11FEC784F6D403563159A7A2AF633ABD050F359B87EF443BB9EA772950832209
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
3Credentials In Files
3