General
- Target 2026-07-10_dade92566253b30a658ef5e36862dcbc_coinminer_elex_frostygoop_hive_poet-rat_salatstealer_sliver_snatch
- Size 15.3MB
- Sample260710-cf1qjac13v
- SHA256 e657a7e6ea77914bb3ba55b410c31f800da0b1f1d90b1556653f74040c4dba0f
- MD5 dade92566253b30a658ef5e36862dcbc
- SHA1 caadcd866d09615b02ae234b7beb9cf8b3ec6402
- SHA512 c2ea00dc71e94ecfa613532af32bc35b3d1438120c147a74bdfc646d6e0298a9db91dcaf7a0dbc06e7c5d2dd6eb36d7965c2fbfad99ed514de5c3bbf0c7e91b3
- SSDEEP 196608:88fsPJXTHhCtbC0cUbqsv6t6m6Ke8to6QU5:5sPJYtJqwXmFtx
- TLSH T176F61825F9CB40E7D48368B1A466222F63346E098B36DAE7E7C0BB15F4737724C7251A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-10_dade92566253b30a658ef5e36862dcbc_coinminer_elex_frostygoop_hive_poet-rat_salatstealer_sliver_snatch.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_dade92566253b30a658ef5e36862dcbc_coinminer_elex_frostygoop_hive_poet-rat_salatstealer_sliver_snatch.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_dade92566253b30a658ef5e36862dcbc_coinminer_elex_frostygoop_hive_poet-rat_salatstealer_sliver_snatch
- Size 15.3MB
- SHA256 e657a7e6ea77914bb3ba55b410c31f800da0b1f1d90b1556653f74040c4dba0f
- MD5 dade92566253b30a658ef5e36862dcbc
- SHA1 caadcd866d09615b02ae234b7beb9cf8b3ec6402
- SHA512 c2ea00dc71e94ecfa613532af32bc35b3d1438120c147a74bdfc646d6e0298a9db91dcaf7a0dbc06e7c5d2dd6eb36d7965c2fbfad99ed514de5c3bbf0c7e91b3
- SSDEEP 196608:88fsPJXTHhCtbC0cUbqsv6t6m6Ke8to6QU5:5sPJYtJqwXmFtx
- TLSH T176F61825F9CB40E7D48368B1A466222F63346E098B36DAE7E7C0BB15F4737724C7251A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Executes dropped EXE
-
Adds Run key to start application