399839cf075c03f876dba587a079c3cd24928b029d79b4c9477590186108f58c

Analysis

max time kernel
148s
max time network
151s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
25/04/2026, 04:29

Target
2026-04-25_8b6c1a4f1ebfb6ea1e0b1e7660ab8593_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-st.exe
Size 9.1MB
Sample260425-e4nf8aft8z
SHA256 399839cf075c03f876dba587a079c3cd24928b029d79b4c9477590186108f58c
MD5 8b6c1a4f1ebfb6ea1e0b1e7660ab8593
SHA1 92a3aca78bb2f67ba6e29b2a3ebb9bb34b7ed4ce
SHA512 d65a1178bea9f57bd7f9ce465dde0369684f16fc21edf9e63ced5af8ba636ac582a2d8927156ed455e5d5e6b6cea82aed80c28c6105f8296704d3063207415ce
SSDEEP 98304:FhtWCcLN5SVwU/4rVLiBTWo/IRmfyMtEC/9:FntciVwUMVLioRmfyM+C/9
TLSH
T16FA66B07ECA504E9C2ADD174C9629263BA727C489B3127D73B50FB283F76BC06A79750
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4732	2026-04-25_8b6c1a4f1ebfb6ea1e0b1e7660ab8593_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-st.exe
Token: SeDebugPrivilege	4732	2026-04-25_8b6c1a4f1ebfb6ea1e0b1e7660ab8593_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-st.exe

C:\Users\Admin\AppData\Local\Temp\2026-04-25_8b6c1a4f1ebfb6ea1e0b1e7660ab8593_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-st.exe
"C:\Users\Admin\AppData\Local\Temp\2026-04-25_8b6c1a4f1ebfb6ea1e0b1e7660ab8593_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-st.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4732