1c832973d2b3cb09bd6ae2dfbc62ac8f4982727d9247fb205163520e7e13e13e

Analysis

max time kernel
149s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
19/05/2026, 10:17

Target
2026-05-19_9d4fd42febd7b6aa26d5b0f4cac74486_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_lu.exe
Size 15.6MB
Sample260519-mbtrjaas2x
SHA256 1c832973d2b3cb09bd6ae2dfbc62ac8f4982727d9247fb205163520e7e13e13e
MD5 9d4fd42febd7b6aa26d5b0f4cac74486
SHA1 b3b986fbf6883337e6f88b8e30e2774c42ccae9c
SHA512 384052c4b9eea2f4245ca87a6213b18439f1ac6fb60125d3d1fc1c61d0904a3191da0e211462435a69c627dfd02ee2f6bc682c4ee9a691b101f6e1b109f7b4af
SSDEEP 196608:PRUk3di5ZGF6A0BBpELkhLUP+4HMFGpsUVtxL:Pj3di2kAxgq1MF70X
TLSH
T15EF67C07E8A145E8C5AD9234C5769263BB707C494B3123D72B60F7382FB7BD46ABA350
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
4500	2026-05-19_9d4fd42febd7b6aa26d5b0f4cac74486_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_lu.exe
4500	2026-05-19_9d4fd42febd7b6aa26d5b0f4cac74486_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_lu.exe
4500	2026-05-19_9d4fd42febd7b6aa26d5b0f4cac74486_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_lu.exe
4500	2026-05-19_9d4fd42febd7b6aa26d5b0f4cac74486_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_lu.exe

C:\Users\Admin\AppData\Local\Temp\2026-05-19_9d4fd42febd7b6aa26d5b0f4cac74486_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_lu.exe
"C:\Users\Admin\AppData\Local\Temp\2026-05-19_9d4fd42febd7b6aa26d5b0f4cac74486_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_lu.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4500