General
- Target 2026-07-19_11f122b41e4edbf4d127237e5b95eb44_coinminer_elex_frostygoop_hive_poet-rat_salatstealer_sliver_snatch
- Size 15.3MB
- Sample260719-ss2rcsdv8n
- SHA256 d4d2dd66905d6d11d2dd8a471848282031e5ac13284d163e67440adc8cf102d2
- MD5 11f122b41e4edbf4d127237e5b95eb44
- SHA1 45b029ae988cd83dfb4cc64e4925da6d8730e98b
- SHA512 d6ace91d7ed075a3bfd000759077a5ef81ba397b430dbef23b6f736119841c97dde4355b484bb675844df3ee15f818849883daa39f2d8f612fc4078a37adfd15
- SSDEEP 196608:88fsPJXTHhCtbC0cUbqsv6t6m6Ke8to6QUs:5sPJYtJqwXmFtU
- TLSH T10EF61825F9CB40E7D48368B1A466222F63346E098B36DAE7E7C0BB15F4737724C7251A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-19_11f122b41e4edbf4d127237e5b95eb44_coinminer_elex_frostygoop_hive_poet-rat_salatstealer_sliver_snatch.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-19_11f122b41e4edbf4d127237e5b95eb44_coinminer_elex_frostygoop_hive_poet-rat_salatstealer_sliver_snatch.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_11f122b41e4edbf4d127237e5b95eb44_coinminer_elex_frostygoop_hive_poet-rat_salatstealer_sliver_snatch
- Size 15.3MB
- SHA256 d4d2dd66905d6d11d2dd8a471848282031e5ac13284d163e67440adc8cf102d2
- MD5 11f122b41e4edbf4d127237e5b95eb44
- SHA1 45b029ae988cd83dfb4cc64e4925da6d8730e98b
- SHA512 d6ace91d7ed075a3bfd000759077a5ef81ba397b430dbef23b6f736119841c97dde4355b484bb675844df3ee15f818849883daa39f2d8f612fc4078a37adfd15
- SSDEEP 196608:88fsPJXTHhCtbC0cUbqsv6t6m6Ke8to6QUs:5sPJYtJqwXmFtU
- TLSH T10EF61825F9CB40E7D48368B1A466222F63346E098B36DAE7E7C0BB15F4737724C7251A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Executes dropped EXE
-
Adds Run key to start application