General
- Target 2026-08-01_7f64a072a6d6f6b12208871dc4fd8824_elex_frostygoop_hive_salatstealer_sliver
- Size 3.1MB
- Sample260802-apcc7aah58
- SHA256 033cfdd3dd7e2bebbc1ed5c838676d024628a92f7dac762eb708ba0c8b7b3e35
- MD5 7f64a072a6d6f6b12208871dc4fd8824
- SHA1 e962fb0804094a48002f8ec0e33bfe370f9d6305
- SHA512 0ed5f1fbf933d94a65e359aeb8c7f01ed8b0fdbd2937e558c3ceed515070e43267748449c0183724c1ad5310ab1b9c03e87424df600194cd6cea270a0e725e66
- SSDEEP 24576:ilipEoVwVg/LkKcqH3pgzKtBkyZaSHMIp027D9YqMOllChP68EG1VSao14i4EPz6:iIp/XpuqxCbVzo1V4/CgcNi6bQxtB7CW
- TLSH T1E8E56C12FDCB44F6E4032A3554A763AF2739A9048B35DA93DF153EB9E9772918C33248
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_7f64a072a6d6f6b12208871dc4fd8824_elex_frostygoop_hive_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_7f64a072a6d6f6b12208871dc4fd8824_elex_frostygoop_hive_salatstealer_sliver
- Size 3.1MB
- SHA256 033cfdd3dd7e2bebbc1ed5c838676d024628a92f7dac762eb708ba0c8b7b3e35
- MD5 7f64a072a6d6f6b12208871dc4fd8824
- SHA1 e962fb0804094a48002f8ec0e33bfe370f9d6305
- SHA512 0ed5f1fbf933d94a65e359aeb8c7f01ed8b0fdbd2937e558c3ceed515070e43267748449c0183724c1ad5310ab1b9c03e87424df600194cd6cea270a0e725e66
- SSDEEP 24576:ilipEoVwVg/LkKcqH3pgzKtBkyZaSHMIp027D9YqMOllChP68EG1VSao14i4EPz6:iIp/XpuqxCbVzo1V4/CgcNi6bQxtB7CW
- TLSH T1E8E56C12FDCB44F6E4032A3554A763AF2739A9048B35DA93DF153EB9E9772918C33248
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
3Credentials In Files
3