General
- Target 2026-07-12_e7e38e6effe1591c55c6f7ff2c4ebd9b_coinminer_elex_frostygoop_hive_poet-rat_salatstealer_sliver_snatch
- Size 15.3MB
- Sample260713-bm3m2acy3w
- SHA256 6faee2f158fb0ad1b4b7373e60c51d79208425218c7538619655f4a0e7dceeb5
- MD5 e7e38e6effe1591c55c6f7ff2c4ebd9b
- SHA1 b5900e5a4eecb2aae7b8e650ba42ee69d9eca02e
- SHA512 0503f35ee7c335151627a1f48c0d1404c75b7b8f1001b14c8f8e369ee6b25de869d9dee9ef33ecada7b5a9bdf5f22d3f535ca691dcddebaf8210b0713dda066c
- SSDEEP 196608:88fsPJXTHhCtbC0cUbqsv6t6m6Ke8to6QUg:5sPJYtJqwXmFtY
- TLSH T196F61825F9CB40E7D48368B1A466222F63346E098B36DAE7E7C0BB15F4737724C7251A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-12_e7e38e6effe1591c55c6f7ff2c4ebd9b_coinminer_elex_frostygoop_hive_poet-rat_salatstealer_sliver_snatch.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_e7e38e6effe1591c55c6f7ff2c4ebd9b_coinminer_elex_frostygoop_hive_poet-rat_salatstealer_sliver_snatch.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_e7e38e6effe1591c55c6f7ff2c4ebd9b_coinminer_elex_frostygoop_hive_poet-rat_salatstealer_sliver_snatch
- Size 15.3MB
- SHA256 6faee2f158fb0ad1b4b7373e60c51d79208425218c7538619655f4a0e7dceeb5
- MD5 e7e38e6effe1591c55c6f7ff2c4ebd9b
- SHA1 b5900e5a4eecb2aae7b8e650ba42ee69d9eca02e
- SHA512 0503f35ee7c335151627a1f48c0d1404c75b7b8f1001b14c8f8e369ee6b25de869d9dee9ef33ecada7b5a9bdf5f22d3f535ca691dcddebaf8210b0713dda066c
- SSDEEP 196608:88fsPJXTHhCtbC0cUbqsv6t6m6Ke8to6QUg:5sPJYtJqwXmFtY
- TLSH T196F61825F9CB40E7D48368B1A466222F63346E098B36DAE7E7C0BB15F4737724C7251A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Executes dropped EXE
-
Adds Run key to start application