General
- Target 2026-08-04_07fd980fda049499b17ca823914ab2fa_coinminer_elex_frostygoop_hive_poet-rat_salatstealer_sliver_snatch
- Size 15.3MB
- Sample260805-bqds3shk2v
- SHA256 3774c439a92d71362254751f3a0b4531a865d316e7f197f783062543c60e1998
- MD5 07fd980fda049499b17ca823914ab2fa
- SHA1 f48ea4d27bee8d3908729968786f2a988dc5cd17
- SHA512 b91c99be1089dd4c84ba385c23df8c5fb47c2dd9e041c85c6038d34f930e83b0a2e9dcb6165111287ef9a19082c9c91553bb08e95102f0d969c2d1e74731475f
- SSDEEP 196608:88fsPJXTHhCtbC0cUbqsv6t6m6Ke8to6QUpI:5sPJYtJqwXmFthI
- TLSH T111F61825F9CB40E7D48368B1A466222F63346E098B36DAE7E7C0BB15F4737724C7251A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_07fd980fda049499b17ca823914ab2fa_coinminer_elex_frostygoop_hive_poet-rat_salatstealer_sliver_snatch.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_07fd980fda049499b17ca823914ab2fa_coinminer_elex_frostygoop_hive_poet-rat_salatstealer_sliver_snatch.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_07fd980fda049499b17ca823914ab2fa_coinminer_elex_frostygoop_hive_poet-rat_salatstealer_sliver_snatch
- Size 15.3MB
- SHA256 3774c439a92d71362254751f3a0b4531a865d316e7f197f783062543c60e1998
- MD5 07fd980fda049499b17ca823914ab2fa
- SHA1 f48ea4d27bee8d3908729968786f2a988dc5cd17
- SHA512 b91c99be1089dd4c84ba385c23df8c5fb47c2dd9e041c85c6038d34f930e83b0a2e9dcb6165111287ef9a19082c9c91553bb08e95102f0d969c2d1e74731475f
- SSDEEP 196608:88fsPJXTHhCtbC0cUbqsv6t6m6Ke8to6QUpI:5sPJYtJqwXmFthI
- TLSH T111F61825F9CB40E7D48368B1A466222F63346E098B36DAE7E7C0BB15F4737724C7251A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Executes dropped EXE
-
Adds Run key to start application