General
- Target 2026-08-07_d2420a1bc451a7b22688fb864d855c5d_coinminer_elex_frostygoop_hive_salatstealer_sliver
- Size 4.2MB
- Sample260807-jjbddazelb
- SHA256 4cda108acd30c0409978b7c84761476b72c9d36b108f8d189e63cbe79df0c498
- MD5 d2420a1bc451a7b22688fb864d855c5d
- SHA1 2025fc956393622e90f0341da3d01c602b2bc1ff
- SHA512 b5feaedad4a01bf253b158ff0962c8cb1ee4c1dcc759579356b038c14492bde9385895f81e7b5ef950df82829cd4bbcd7fef7db87d6c7c239e47c608b6444265
- SSDEEP 49152:BFWDKubO5RjvN2B7ellZHD9Rp3MBeqID0zvvbQpWbW7:biO5Rxi7ebRqexozvMp5
- TLSH T132161951FECB88F2E503163150ABB26F633D69054F3A8B53EE542D79EA733911823789
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_d2420a1bc451a7b22688fb864d855c5d_coinminer_elex_frostygoop_hive_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_d2420a1bc451a7b22688fb864d855c5d_coinminer_elex_frostygoop_hive_salatstealer_sliver
- Size 4.2MB
- SHA256 4cda108acd30c0409978b7c84761476b72c9d36b108f8d189e63cbe79df0c498
- MD5 d2420a1bc451a7b22688fb864d855c5d
- SHA1 2025fc956393622e90f0341da3d01c602b2bc1ff
- SHA512 b5feaedad4a01bf253b158ff0962c8cb1ee4c1dcc759579356b038c14492bde9385895f81e7b5ef950df82829cd4bbcd7fef7db87d6c7c239e47c608b6444265
- SSDEEP 49152:BFWDKubO5RjvN2B7ellZHD9Rp3MBeqID0zvvbQpWbW7:biO5Rxi7ebRqexozvMp5
- TLSH T132161951FECB88F2E503163150ABB26F633D69054F3A8B53EE542D79EA733911823789
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
3Credentials In Files
3