General
- Target 2026-08-01_51624b57576fa8f8d5d89e80deebe683_elex_frostygoop_glassworm_hive_salatstealer_sliver_snatch
- Size 2.6MB
- Sample260801-dwrm8sdn2w
- SHA256 298dd2c18d99a4396c7dc2c355e0cf406eb82b660f4494bb9ba0e31d2d585a42
- MD5 51624b57576fa8f8d5d89e80deebe683
- SHA1 cae9be6dda61fa5bcd256bd21da123bbd696d7e4
- SHA512 da19b578491fa1652708998a6f72a233ab5f9b1c8dcde648ace858ec4a633db32d5168b1f9b2e2aa84f3b40ffd6926d9f0f907e1865d31d2a3181e2785fe5659
- SSDEEP 24576:9cdFy4boNg/LqfhDhFRXg8CJvXe413JGaeUG0bIUxYy1hX7Zb794psWI74BPvbI5:9AFKNbQVslBEVOIrY2EPA7tbsJqQC
- TLSH T1F9D54911FECB84F2D403563155A7A2AF6339BD050F36DB87EF443ABAEA772D14922205
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_51624b57576fa8f8d5d89e80deebe683_elex_frostygoop_glassworm_hive_salatstealer_sliver_snatch.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_51624b57576fa8f8d5d89e80deebe683_elex_frostygoop_glassworm_hive_salatstealer_sliver_snatch
- Size 2.6MB
- SHA256 298dd2c18d99a4396c7dc2c355e0cf406eb82b660f4494bb9ba0e31d2d585a42
- MD5 51624b57576fa8f8d5d89e80deebe683
- SHA1 cae9be6dda61fa5bcd256bd21da123bbd696d7e4
- SHA512 da19b578491fa1652708998a6f72a233ab5f9b1c8dcde648ace858ec4a633db32d5168b1f9b2e2aa84f3b40ffd6926d9f0f907e1865d31d2a3181e2785fe5659
- SSDEEP 24576:9cdFy4boNg/LqfhDhFRXg8CJvXe413JGaeUG0bIUxYy1hX7Zb794psWI74BPvbI5:9AFKNbQVslBEVOIrY2EPA7tbsJqQC
- TLSH T1F9D54911FECB84F2D403563155A7A2AF6339BD050F36DB87EF443ABAEA772D14922205
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
3Credentials In Files
3