Resubmissions

14/10/2026, 04:36

261014-e8cwaaee353

13/04/2026, 06:28

260413-g8mftsdw9j3

General

  • Target
    2026-04-13_2b5daf7931b3e4664703126e86bfe43f_elex_frostygoop_ghostlocker_hive_salatstealer_sliver_snatch
  • Size 4.1MB
  • Sample261014-e8cwaaee35
  • SHA256 00086fa7fd67137d34a77d0898a8c44f1c92c2ea7edd115bd0a11aa699279b2f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • 2026-04-13_2b5daf7931b3e4664703126e86bfe43f_elex_frostygoop_ghostlocker_hive_salatstealer_sliver_snatch
    .exe 4.1MB

2026-04-13_2b5daf7931b3e4664703126e86bfe43f_elex_frostygoop_ghostlocker_hive_salatstealer_sliver_snatch

  • IMPHASH 4f2f006e2ecf7172ad368f8289dc96c1
  • SHA256 00086fa7fd67137d34a77d0898a8c44f1c92c2ea7edd115bd0a11aa699279b2f
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
1
Major OS version
6
Entry point
424816
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths