General
- Target 2026-08-02_f3854dc07f7b9adb3c7c8b20842ab18f_elex_frostygoop_hive_salatstealer_sliver
- Size 3.3MB
- Sample260802-3drmysywbx
- SHA256 25f23547294d111b9e1b5a5ef166636047533ebf9dd673f818abf7c7d732dfc0
- MD5 f3854dc07f7b9adb3c7c8b20842ab18f
- SHA1 cbecdb033593bcaeb2ba8eab339925437bd38835
- SHA512 060742b6b2423a529ad8d9a36d3f376f7c42ec603d26eecc7f72df836a38526adecc0196f9d2f380673b4b8e261103c984ba250b4639e8ccc8d8486ee64346b1
- SSDEEP 49152:KFy96ZiEGlkr9F03qDOZ5UWW8Z0KqbQQpbnH8a:sy2iEGegxBhQFZ
- TLSH T17AF56C11FEC744F6E4033A3554A7327F3B39A9080B35D6A7EE143AB9F9776920823649
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_f3854dc07f7b9adb3c7c8b20842ab18f_elex_frostygoop_hive_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_f3854dc07f7b9adb3c7c8b20842ab18f_elex_frostygoop_hive_salatstealer_sliver
- Size 3.3MB
- SHA256 25f23547294d111b9e1b5a5ef166636047533ebf9dd673f818abf7c7d732dfc0
- MD5 f3854dc07f7b9adb3c7c8b20842ab18f
- SHA1 cbecdb033593bcaeb2ba8eab339925437bd38835
- SHA512 060742b6b2423a529ad8d9a36d3f376f7c42ec603d26eecc7f72df836a38526adecc0196f9d2f380673b4b8e261103c984ba250b4639e8ccc8d8486ee64346b1
- SSDEEP 49152:KFy96ZiEGlkr9F03qDOZ5UWW8Z0KqbQQpbnH8a:sy2iEGegxBhQFZ
- TLSH T17AF56C11FEC744F6E4033A3554A7327F3B39A9080B35D6A7EE143AB9F9776920823649
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
3Credentials In Files
3