General
- Target 2026-07-23_60d00f583cb300d5ea9e9f3eb4f31330_coinminer_elex_frostygoop_hive_poet-rat_salatstealer_sliver_snatch
- Size 15.3MB
- Sample260723-p6s5laxthv
- SHA256 5cc735f52b203d759adace6ffb3ad8bc386795b1f3ce6a083bccb5875ff006b0
- MD5 60d00f583cb300d5ea9e9f3eb4f31330
- SHA1 5e4ec88ace996e6614b4aff2f9f518a92b982d88
- SHA512 5cb300ff426622d32f9ad0c77c9cded064cc35191a1399703e5063b4a7d33803da16ae5c363dcbef32885808d836d3234f5f998fc3ae4f6f7e10aa8fde481c04
- SSDEEP 196608:88fsPJXTHhCtbC0cUbqsv6t6m6Ke8to6QU9:5sPJYtJqwXmFt1
- TLSH T180F61825F9CB40E7D48368B1A466222F63346E098B36DAE7E7C0BB15F4737724C7251A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_60d00f583cb300d5ea9e9f3eb4f31330_coinminer_elex_frostygoop_hive_poet-rat_salatstealer_sliver_snatch.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_60d00f583cb300d5ea9e9f3eb4f31330_coinminer_elex_frostygoop_hive_poet-rat_salatstealer_sliver_snatch.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_60d00f583cb300d5ea9e9f3eb4f31330_coinminer_elex_frostygoop_hive_poet-rat_salatstealer_sliver_snatch
- Size 15.3MB
- SHA256 5cc735f52b203d759adace6ffb3ad8bc386795b1f3ce6a083bccb5875ff006b0
- MD5 60d00f583cb300d5ea9e9f3eb4f31330
- SHA1 5e4ec88ace996e6614b4aff2f9f518a92b982d88
- SHA512 5cb300ff426622d32f9ad0c77c9cded064cc35191a1399703e5063b4a7d33803da16ae5c363dcbef32885808d836d3234f5f998fc3ae4f6f7e10aa8fde481c04
- SSDEEP 196608:88fsPJXTHhCtbC0cUbqsv6t6m6Ke8to6QU9:5sPJYtJqwXmFt1
- TLSH T180F61825F9CB40E7D48368B1A466222F63346E098B36DAE7E7C0BB15F4737724C7251A
- MD5 SHA1 SHA512 SSDEEP TLSH
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
Executes dropped EXE
Adds Run key to start application