General
- Target 2026-08-10_0f4072a1774ee421890e5fa3d8faba13_coinminer_elex_frostygoop_hive_salatstealer_sliver
- Size 4.2MB
- Sample260810-f15rrsec48
- SHA256 b7f25e6a139e41b409bca16855a6d907f2ee2ab66b19f89b4c65f1c758fd5f1e
- MD5 0f4072a1774ee421890e5fa3d8faba13
- SHA1 9a36a0fc19efccc83dc63395d1f0fa142d7b2567
- SHA512 3ad5eedc355fa2a82082102c0829a8d12c8ea9b2a894b46d17710705009ab9c2c6c81f07bc73ed9680c52705b72695093dfd313b9c2402edfe2063ab88b85363
- SSDEEP 49152:lvCG6qOW/dMgGgodcdqtRwZUPN6bQpsJQq0:5fnOW/d4/mUP7p/J
- TLSH T12D162800EECB44F2D4472A30A0EB636F6738AD051F36DB67EF543A79E9772910876648
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_0f4072a1774ee421890e5fa3d8faba13_coinminer_elex_frostygoop_hive_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_0f4072a1774ee421890e5fa3d8faba13_coinminer_elex_frostygoop_hive_salatstealer_sliver
- Size 4.2MB
- SHA256 b7f25e6a139e41b409bca16855a6d907f2ee2ab66b19f89b4c65f1c758fd5f1e
- MD5 0f4072a1774ee421890e5fa3d8faba13
- SHA1 9a36a0fc19efccc83dc63395d1f0fa142d7b2567
- SHA512 3ad5eedc355fa2a82082102c0829a8d12c8ea9b2a894b46d17710705009ab9c2c6c81f07bc73ed9680c52705b72695093dfd313b9c2402edfe2063ab88b85363
- SSDEEP 49152:lvCG6qOW/dMgGgodcdqtRwZUPN6bQpsJQq0:5fnOW/d4/mUP7p/J
- TLSH T12D162800EECB44F2D4472A30A0EB636F6738AD051F36DB67EF543A79E9772910876648
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
3Credentials In Files
3