General
- Target 2026-08-06_f52534fdc471d5698eeb6a41cec79cac_coinminer_elex_frostygoop_hive_http-browser_salatstealer_sliver
- Size 41.7MB
- Sample260806-bdql4sbj7z
- SHA256 2fd5b9483e0a32a6e6fe2e3489467148f33d6e344973e6433cc65b7ea3ee1a0c
- MD5 f52534fdc471d5698eeb6a41cec79cac
- SHA1 df6f7194fc24d39fb0adce423dd185dcf1079d4c
- SHA512 82a8a3ec2d4b41711fae6b99fcfa0dbfcf661c931c12d04967d312c2be1dc4a33b7809c1306c0a9b8089bdf254e094b8566a4f3a0328a7446a0e7660edf44ca7
- SSDEEP 786432:l+ehVeS0TnvpYuNHqsUo5A9EFjOwP4oJw3Lft+zD3b18PLFTZMPdzHr:DhVeFyu0dAIE5fgoJw3LVCDer
- TLSH T136A73350FD8B44F6E4072A3162ABB2AF23265D454F36CB97FB843B6DFA722C50931245
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-06_f52534fdc471d5698eeb6a41cec79cac_coinminer_elex_frostygoop_hive_http-browser_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_f52534fdc471d5698eeb6a41cec79cac_coinminer_elex_frostygoop_hive_http-browser_salatstealer_sliver
- Size 41.7MB
- SHA256 2fd5b9483e0a32a6e6fe2e3489467148f33d6e344973e6433cc65b7ea3ee1a0c
- MD5 f52534fdc471d5698eeb6a41cec79cac
- SHA1 df6f7194fc24d39fb0adce423dd185dcf1079d4c
- SHA512 82a8a3ec2d4b41711fae6b99fcfa0dbfcf661c931c12d04967d312c2be1dc4a33b7809c1306c0a9b8089bdf254e094b8566a4f3a0328a7446a0e7660edf44ca7
- SSDEEP 786432:l+ehVeS0TnvpYuNHqsUo5A9EFjOwP4oJw3Lft+zD3b18PLFTZMPdzHr:DhVeFyu0dAIE5fgoJw3LVCDer
- TLSH T136A73350FD8B44F6E4072A3162ABB2AF23265D454F36CB97FB843B6DFA722C50931245
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1