fffdb33201bbce47004e1beceda95f506b78be3b7ae604112bfa788db5380745

Analysis

max time kernel
149s
max time network
98s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
22/05/2026, 03:54

Target
2026-05-22_cedcae7c300f5c43c7e63732f9454fb6_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_p.exe
Size 6.3MB
Sample260522-egekssdy4m
SHA256 fffdb33201bbce47004e1beceda95f506b78be3b7ae604112bfa788db5380745
MD5 cedcae7c300f5c43c7e63732f9454fb6
SHA1 a6f69107624f89977147c62030ddffc7683cb02f
SHA512 2c6fef39827aeb748ec03e65790b9be956e12bdb7d50c4c054aa4c432f157db63e0ced0b3e0a52fdff182c4cf8a3653e95b3b091ba17d7bc31930423d60554c1
SSDEEP 49152:jY3IAW9GrPcpnp0DLKHGFWVucGjKTEobzvp5Tjr5EVuUACfjnnud4rMUSpuDEG:8YAWYrxDuuc/DlEZ7S4lQA
TLSH
T199664A47ECA545A8C0EEE6318A729253BB717C584B3027D72F50F7282F76BD0AA79740
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	3200	2026-05-22_cedcae7c300f5c43c7e63732f9454fb6_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_p.exe

C:\Users\Admin\AppData\Local\Temp\2026-05-22_cedcae7c300f5c43c7e63732f9454fb6_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_p.exe
"C:\Users\Admin\AppData\Local\Temp\2026-05-22_cedcae7c300f5c43c7e63732f9454fb6_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_p.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:3200