General
- Target 2026-08-08_04f704de8f1c0f5c844c608f105c6cac_coinminer_elex_frostygoop_hive_salatstealer_sliver
- Size 3.7MB
- Sample260808-fr2czs1bpc
- SHA256 e9a47fa200891c9461e70cafedcfc71e0dd3aa23dd3cc4f3d755154841da5076
- MD5 04f704de8f1c0f5c844c608f105c6cac
- SHA1 54846c5de34e3d0cc716dad0024c4bb9709420f5
- SHA512 95d856211c58c483cb2cba8ca0ec6b15a1c627e45b9197132076c59165604468f865c69f841572ba5882d4b7b5d5a68b1092b0ea95d833fdaf33452fa25c0df6
- SSDEEP 24576:UDL+PcNxNg/LWOaoaW7gPRpIAfnoeXF41LkbKZdyOfG6BlWOFjuEbrSEMzRucXAe:UP+EOcP82hlc1IsHX8vf7vbQpo
- TLSH T13F064A02EDC681F6D4432A3114E772AF6B3969050F3ADB53EE503E79EA773A15C22219
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_04f704de8f1c0f5c844c608f105c6cac_coinminer_elex_frostygoop_hive_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_04f704de8f1c0f5c844c608f105c6cac_coinminer_elex_frostygoop_hive_salatstealer_sliver
- Size 3.7MB
- SHA256 e9a47fa200891c9461e70cafedcfc71e0dd3aa23dd3cc4f3d755154841da5076
- MD5 04f704de8f1c0f5c844c608f105c6cac
- SHA1 54846c5de34e3d0cc716dad0024c4bb9709420f5
- SHA512 95d856211c58c483cb2cba8ca0ec6b15a1c627e45b9197132076c59165604468f865c69f841572ba5882d4b7b5d5a68b1092b0ea95d833fdaf33452fa25c0df6
- SSDEEP 24576:UDL+PcNxNg/LWOaoaW7gPRpIAfnoeXF41LkbKZdyOfG6BlWOFjuEbrSEMzRucXAe:UP+EOcP82hlc1IsHX8vf7vbQpo
- TLSH T13F064A02EDC681F6D4432A3114E772AF6B3969050F3ADB53EE503E79EA773A15C22219
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
3Credentials In Files
3