General
- Target 2026-08-19_c16df3dd6aa33c2800197bbda78bb75c_elex_frostygoop_hive_salatstealer_sliver
- Size 2.3MB
- Sample260819-e4et3sdn3x
- SHA256 a68c3617906d33a7c39392141e8789819ad0a584c8961c69fa8e76281774adf1
- MD5 c16df3dd6aa33c2800197bbda78bb75c
- SHA1 31c39cb7d2f44576af09c5d2bb58508822e5e507
- SHA512 9a4a308b66792c46c894c98ddb163b5046a417b20f2fa48217faa211536381621ba0deccb3a5e9840ce6b7561194bde39793a4a5da042ccf338d22161f34a060
- SSDEEP 24576:2qKZLZVUNOHNgfL9SRhF0czBPQpnT6UAIeITRV/qQX9zo3e+xUe7sbwgERsk/wj+:2R9RV/GEghkT0pCvJ
- TLSH T1E6B55B11E9DF45F6E5472A3254ABA3AF33306D054F32DA47EE48B9B9F9376E00C26205
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_c16df3dd6aa33c2800197bbda78bb75c_elex_frostygoop_hive_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_c16df3dd6aa33c2800197bbda78bb75c_elex_frostygoop_hive_salatstealer_sliver
- Size 2.3MB
- SHA256 a68c3617906d33a7c39392141e8789819ad0a584c8961c69fa8e76281774adf1
- MD5 c16df3dd6aa33c2800197bbda78bb75c
- SHA1 31c39cb7d2f44576af09c5d2bb58508822e5e507
- SHA512 9a4a308b66792c46c894c98ddb163b5046a417b20f2fa48217faa211536381621ba0deccb3a5e9840ce6b7561194bde39793a4a5da042ccf338d22161f34a060
- SSDEEP 24576:2qKZLZVUNOHNgfL9SRhF0czBPQpnT6UAIeITRV/qQX9zo3e+xUe7sbwgERsk/wj+:2R9RV/GEghkT0pCvJ
- TLSH T1E6B55B11E9DF45F6E5472A3254ABA3AF33306D054F32DA47EE48B9B9F9376E00C26205
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
3Credentials In Files
3