General
- Target 2026-08-07_6a8122211cc6db812e09aef56f5fe8a9_elex_frostygoop_hive_salatstealer_sliver
- Size 2.9MB
- Sample260807-l665nsseqc
- SHA256 582f087cbd3706b9ecb6e5bdcc1b38e409c05a5dbbf759e811833e0f85069829
- MD5 6a8122211cc6db812e09aef56f5fe8a9
- SHA1 3424a489a1070a41894d08191765e631294417f7
- SHA512 7c3cf8421066fa909ae7ee1b37f5d79826c34fe70432f12aea202e85d704b975c1c4027eb453c2b396f379d300dd365476aef7a7ffb795c626aacc26169e8074
- SSDEEP 49152:j+Kq273ws/P5dhk4LceWP5R0gPY3VEh3ACxKgwWkWGl8k9HbZrPiEFIZ0zjaBL7s:a273pJdhhceWP5R0gPY3VEh3ACxKgwWw
- TLSH T1AFE55C01FECB41F6D8031A3164A7A26F3735AC085F36DBA7FE543A79EA732910C26645
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_6a8122211cc6db812e09aef56f5fe8a9_elex_frostygoop_hive_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_6a8122211cc6db812e09aef56f5fe8a9_elex_frostygoop_hive_salatstealer_sliver
- Size 2.9MB
- SHA256 582f087cbd3706b9ecb6e5bdcc1b38e409c05a5dbbf759e811833e0f85069829
- MD5 6a8122211cc6db812e09aef56f5fe8a9
- SHA1 3424a489a1070a41894d08191765e631294417f7
- SHA512 7c3cf8421066fa909ae7ee1b37f5d79826c34fe70432f12aea202e85d704b975c1c4027eb453c2b396f379d300dd365476aef7a7ffb795c626aacc26169e8074
- SSDEEP 49152:j+Kq273ws/P5dhk4LceWP5R0gPY3VEh3ACxKgwWkWGl8k9HbZrPiEFIZ0zjaBL7s:a273pJdhhceWP5R0gPY3VEh3ACxKgwWw
- TLSH T1AFE55C01FECB41F6D8031A3164A7A26F3735AC085F36DBA7FE543A79EA732910C26645
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
3Credentials In Files
3