Analysis
- max time kernel
150s - max time network
101s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
06/08/2026, 08:23
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-06_33f11c714e0519d7922cc72fee213b0b_coinminer_elex_frostygoop_hive_poet-rat_salatstealer_sliver_snatch.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_33f11c714e0519d7922cc72fee213b0b_coinminer_elex_frostygoop_hive_poet-rat_salatstealer_sliver_snatch.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-08-06_33f11c714e0519d7922cc72fee213b0b_coinminer_elex_frostygoop_hive_poet-rat_salatstealer_sliver_snatch.exe
- Size 29.4MB
- Sample260806-kagdpsxamd
- SHA256 62434b1af5690c5d692e7daa8bf9e61e252c16ff623dadca53950ad906a75dcc
- MD5 33f11c714e0519d7922cc72fee213b0b
- SHA1 9441c21df56aecebada05d25a2aafb7bd916612e
- SHA512 f66fb6c993cf24895b886aac87fe93b11a2e3f1e87e89d9d4d5b37322762552f13fe7703ac7abbed5ba9dfff74fa8373140e5300371d635b1b067474b2c14641
- SSDEEP 393216:v8zma5bZHxPDKYEyVAUyaAAQVhUNeNha:v86a5bZHlKYEyiUy+yaNj
- TLSH T115673955F9C752F3E48708702066623F63356D09973ADAEBE7C07B19F9723B2487221A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-06_33f11c714e0519d7922cc72fee213b0b_coinminer_elex_frostygoop_hive_poet-rat_salatstealer_sliver_snatch.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-06_33f11c714e0519d7922cc72fee213b0b_coinminer_elex_frostygoop_hive_poet-rat_salatstealer_sliver_snatch.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-06_33f11c714e0519d7922cc72fee213b0b_coinminer_elex_frostygoop_hive_poet-rat_salatstealer_sliver_snatch.exe"1⤵
- System Location Discovery: System Language Discovery
PID:4700