General
- Target 2026-08-09_6b81f5d37a28bd1118b4e109fab1d9f4_elex_frostygoop_glassworm_hive_salatstealer_sliver
- Size 4.0MB
- Sample260809-c94paayfja
- SHA256 d0e84b961a9f75381ac965d83dd4ae39c6bfe29979fee8a202bfe7433b7413fb
- MD5 6b81f5d37a28bd1118b4e109fab1d9f4
- SHA1 5cabd5bed8fa42a4fee14b107945dfe729b0a3aa
- SHA512 74c9aedda16567396589b1bd36c4a07c6d7444acde24617ae399b16511b944c43a108bd7ec54ce72a0ad3ffc409ba95e248b603fec6a5e4d3548f6c242f65eec
- SSDEEP 24576:xDxOKj3mGg/LwMYmfhxy76KGmjup7plidzxaj+1RfVllle9FHvDG0TjMvlleDBBl:xNOuKhrlboAHK0TjMvT8qE3RbQxmhcWv
- TLSH T164162A01FECA40F2D4031B3594E7A36F6339AE051F3A9B97EE543A69EE332950D32645
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_6b81f5d37a28bd1118b4e109fab1d9f4_elex_frostygoop_glassworm_hive_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_6b81f5d37a28bd1118b4e109fab1d9f4_elex_frostygoop_glassworm_hive_salatstealer_sliver
- Size 4.0MB
- SHA256 d0e84b961a9f75381ac965d83dd4ae39c6bfe29979fee8a202bfe7433b7413fb
- MD5 6b81f5d37a28bd1118b4e109fab1d9f4
- SHA1 5cabd5bed8fa42a4fee14b107945dfe729b0a3aa
- SHA512 74c9aedda16567396589b1bd36c4a07c6d7444acde24617ae399b16511b944c43a108bd7ec54ce72a0ad3ffc409ba95e248b603fec6a5e4d3548f6c242f65eec
- SSDEEP 24576:xDxOKj3mGg/LwMYmfhxy76KGmjup7plidzxaj+1RfVllle9FHvDG0TjMvlleDBBl:xNOuKhrlboAHK0TjMvT8qE3RbQxmhcWv
- TLSH T164162A01FECA40F2D4031B3594E7A36F6339AE051F3A9B97EE543A69EE332950D32645
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
3Credentials In Files
3