General
- Target 2026-08-02_d7164a7f4c3c4b3b5d4f90d07b74066f_coinminer_elex_frostygoop_hive_poet-rat_salatstealer_sliver_snatch
- Size 15.3MB
- Sample260802-3ley5atemc
- SHA256 2c4fa9596260124d7cf99a2d309efd7f87e6f83e9936e04d7f8f146d6af5d019
- MD5 d7164a7f4c3c4b3b5d4f90d07b74066f
- SHA1 fddf70fc02a5bb487f19ff337277197c6d6a8ffe
- SHA512 2d5ebebb903e4d9cb208ba9604b8ae132dc5c664a8a2447a530e9bd6736639f1beccee3dca7f3d1401f6e511cb03cd3e2bc8758a21352764fb0483a106a539a5
- SSDEEP 196608:88fsPJXTHhCtbC0cUbqsv6t6m6Ke8to6QUN:5sPJYtJqwXmFtl
- TLSH T108F61825F9CB40E7D48368B1A466222F63346E098B36DAE7E7C0BB15F4737724C7251A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_d7164a7f4c3c4b3b5d4f90d07b74066f_coinminer_elex_frostygoop_hive_poet-rat_salatstealer_sliver_snatch.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_d7164a7f4c3c4b3b5d4f90d07b74066f_coinminer_elex_frostygoop_hive_poet-rat_salatstealer_sliver_snatch.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_d7164a7f4c3c4b3b5d4f90d07b74066f_coinminer_elex_frostygoop_hive_poet-rat_salatstealer_sliver_snatch
- Size 15.3MB
- SHA256 2c4fa9596260124d7cf99a2d309efd7f87e6f83e9936e04d7f8f146d6af5d019
- MD5 d7164a7f4c3c4b3b5d4f90d07b74066f
- SHA1 fddf70fc02a5bb487f19ff337277197c6d6a8ffe
- SHA512 2d5ebebb903e4d9cb208ba9604b8ae132dc5c664a8a2447a530e9bd6736639f1beccee3dca7f3d1401f6e511cb03cd3e2bc8758a21352764fb0483a106a539a5
- SSDEEP 196608:88fsPJXTHhCtbC0cUbqsv6t6m6Ke8to6QUN:5sPJYtJqwXmFtl
- TLSH T108F61825F9CB40E7D48368B1A466222F63346E098B36DAE7E7C0BB15F4737724C7251A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Executes dropped EXE
-
Adds Run key to start application