Analysis
- max time kernel
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
13/08/2026, 00:52
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-12_772eaf5a1ec655357db9b21a39ceb2bf_elex_frostygoop_hive_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-12_772eaf5a1ec655357db9b21a39ceb2bf_elex_frostygoop_hive_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-08-12_772eaf5a1ec655357db9b21a39ceb2bf_elex_frostygoop_hive_salatstealer_sliver.exe
- Size 7.6MB
- Sample260813-a8gr1sycmd
- SHA256 9b83145a6c1e97938726e9b15b4e33494bcf888e4cea01a46c49ddda3e591e87
- MD5 772eaf5a1ec655357db9b21a39ceb2bf
- SHA1 20d92ef4fd15ee766bada347d13688136cbe3b12
- SHA512 e7bd715d081dcc09483ac1d0b47d45e0b4f8925c201b75f126425707784f3552f069dec86f80b00b8f3d595e51bb38a6af4c49fcec30fa2ac7feed40c8fc62f5
- SSDEEP 49152:ZnXFCAy1QNzlGzd5ZZcJPj5+WpIOsPOAR0l8:NXFCABqzZ+d5+ycaq
- TLSH T1AC86F746FBCD61F3FA071E3520ABA22F6B3A36545F3C8A47DF5438A5AB633711826105
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-12_772eaf5a1ec655357db9b21a39ceb2bf_elex_frostygoop_hive_salatstealer_sliver.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-12_772eaf5a1ec655357db9b21a39ceb2bf_elex_frostygoop_hive_salatstealer_sliver.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-12_772eaf5a1ec655357db9b21a39ceb2bf_elex_frostygoop_hive_salatstealer_sliver.exe"1⤵
- System Location Discovery: System Language Discovery
PID:4584