General
- Target 2026-08-05_37f06c78d05a2aeb8452b90c7d993bfe_elex_frostygoop_hive_salatstealer_sliver
- Size 2.9MB
- Sample260805-1a675assfx
- SHA256 273b3e97c4524f6bc48798d0cc1569378cde5745d29d170683bb68a1ac32fbc9
- MD5 37f06c78d05a2aeb8452b90c7d993bfe
- SHA1 1361fb61a595f87db4f8031e1aaac2dbfcdac8b0
- SHA512 b8f3ffa2ee09a00cfb5c6f991c255bcf99b5aeda955634e2adb0a412e2c27bacd359a9d382b0f7b1cbcd2948e509da8c419fdf86de921eb6b0aca93cb04f8b33
- SSDEEP 49152:fPeFr3jD3GoNIqaHcwMa+XSdjD8OBh5rFaKEEJH8hZQQrs6JaGI2wuozc7WltVcg:3g3jL4qaHcwMa+XSdjD8OBh5rFaKEEJr
- TLSH T162E56D01FECB41F6D503163164A7A26F2739AC085F36DB67EE503BB9FAB32910827645
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_37f06c78d05a2aeb8452b90c7d993bfe_elex_frostygoop_hive_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_37f06c78d05a2aeb8452b90c7d993bfe_elex_frostygoop_hive_salatstealer_sliver
- Size 2.9MB
- SHA256 273b3e97c4524f6bc48798d0cc1569378cde5745d29d170683bb68a1ac32fbc9
- MD5 37f06c78d05a2aeb8452b90c7d993bfe
- SHA1 1361fb61a595f87db4f8031e1aaac2dbfcdac8b0
- SHA512 b8f3ffa2ee09a00cfb5c6f991c255bcf99b5aeda955634e2adb0a412e2c27bacd359a9d382b0f7b1cbcd2948e509da8c419fdf86de921eb6b0aca93cb04f8b33
- SSDEEP 49152:fPeFr3jD3GoNIqaHcwMa+XSdjD8OBh5rFaKEEJH8hZQQrs6JaGI2wuozc7WltVcg:3g3jL4qaHcwMa+XSdjD8OBh5rFaKEEJr
- TLSH T162E56D01FECB41F6D503163164A7A26F2739AC085F36DB67EE503BB9FAB32910827645
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
3Credentials In Files
3