General
- Target 2026-08-12_593eaed05dd4f909671f39c7a6407666_elex_frostygoop_glassworm_hive_salatstealer_sliver
- Size 4.3MB
- Sample260812-c2w98sab33
- SHA256 44b7b2b72ee990e58a71102289185c7c28a546a53258e92c3daed115cc16bbbd
- MD5 593eaed05dd4f909671f39c7a6407666
- SHA1 500b448c9a85d7f90cf7bef6a8793fae8b8e6853
- SHA512 ae86858a533b8f955d8e62bc61f63b248c8a86bf7fd8aa2b0a694272891b6fada67d7973cd4e611dc29a87c50f4c23b0ed5f7635a8ad01352fe750285ce32349
- SSDEEP 49152:SiNwIv02GWWc4u4AL59Aq292vSkK9eVWef86/beXkrM7wobQx1Phc8:Hjv02G9TUVSgKXDw3x3
- TLSH T1E5263941FFCB44F2D9431A7054ABA26F673869094F3ACB97EE443A69ED333911C23649
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-12_593eaed05dd4f909671f39c7a6407666_elex_frostygoop_glassworm_hive_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_593eaed05dd4f909671f39c7a6407666_elex_frostygoop_glassworm_hive_salatstealer_sliver
- Size 4.3MB
- SHA256 44b7b2b72ee990e58a71102289185c7c28a546a53258e92c3daed115cc16bbbd
- MD5 593eaed05dd4f909671f39c7a6407666
- SHA1 500b448c9a85d7f90cf7bef6a8793fae8b8e6853
- SHA512 ae86858a533b8f955d8e62bc61f63b248c8a86bf7fd8aa2b0a694272891b6fada67d7973cd4e611dc29a87c50f4c23b0ed5f7635a8ad01352fe750285ce32349
- SSDEEP 49152:SiNwIv02GWWc4u4AL59Aq292vSkK9eVWef86/beXkrM7wobQx1Phc8:Hjv02G9TUVSgKXDw3x3
- TLSH T1E5263941FFCB44F2D9431A7054ABA26F673869094F3ACB97EE443A69ED333911C23649
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
3Credentials In Files
3