General
- Target 2026-07-23_ed4bbc7b27898f03c43131c586551fe1_coinminer_elex_frostygoop_hive_poet-rat_salatstealer_sliver_snatch
- Size 15.3MB
- Sample260723-mr3pdaz1c1
- SHA256 5a5d7dc06a322bd6c6fa4dc69b342d34545418f41d68e536aa47c097872edfb1
- MD5 ed4bbc7b27898f03c43131c586551fe1
- SHA1 7a32af4b2c50db0d20acca4e56a46d8cbe765b12
- SHA512 979c40ad3a291ed83629db4b0cdf6a8544563950b118aedcf5163699ec0b195b57f35b1d52e5351849e932a5fee0e23d73ad3cddf2b8b6bba3123aa6c4ea7150
- SSDEEP 196608:88fsPJXTHhCtbC0cUbqsv6t6m6Ke8to6QU/:5sPJYtJqwXmFt3
- TLSH T1EEF61825F9CB40E7D48368B1A466222F63346E098B36DAE7E7C0BB15F4737724C7251A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_ed4bbc7b27898f03c43131c586551fe1_coinminer_elex_frostygoop_hive_poet-rat_salatstealer_sliver_snatch.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_ed4bbc7b27898f03c43131c586551fe1_coinminer_elex_frostygoop_hive_poet-rat_salatstealer_sliver_snatch.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_ed4bbc7b27898f03c43131c586551fe1_coinminer_elex_frostygoop_hive_poet-rat_salatstealer_sliver_snatch
- Size 15.3MB
- SHA256 5a5d7dc06a322bd6c6fa4dc69b342d34545418f41d68e536aa47c097872edfb1
- MD5 ed4bbc7b27898f03c43131c586551fe1
- SHA1 7a32af4b2c50db0d20acca4e56a46d8cbe765b12
- SHA512 979c40ad3a291ed83629db4b0cdf6a8544563950b118aedcf5163699ec0b195b57f35b1d52e5351849e932a5fee0e23d73ad3cddf2b8b6bba3123aa6c4ea7150
- SSDEEP 196608:88fsPJXTHhCtbC0cUbqsv6t6m6Ke8to6QU/:5sPJYtJqwXmFt3
- TLSH T1EEF61825F9CB40E7D48368B1A466222F63346E098B36DAE7E7C0BB15F4737724C7251A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Executes dropped EXE
-
Adds Run key to start application