55fd6d0f7f34772e1571718163f34be6cbf42a2f02265da983b2148d2253f9c1

Analysis

max time kernel
149s
max time network
94s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
22/05/2026, 04:18

Target
2026-05-22_f763417719b7bea02f183417f83e4deb_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_p.exe
Size 6.3MB
Sample260522-ew52ases6n
SHA256 55fd6d0f7f34772e1571718163f34be6cbf42a2f02265da983b2148d2253f9c1
MD5 f763417719b7bea02f183417f83e4deb
SHA1 c1e6a77e8f98ce8d65eb9f7d140b577846e9578e
SHA512 473c9719e8524ad2ab76637671ee8a73d510b705620cb79ae6ab18ceacffdbb4fe80f29d16661a1a739a962e1aebab96b0d241405ee11101d22e9e7176f1ffd1
SSDEEP 49152:oY3IAW9GrPcpnp0DLKHGFWVucGjKTEobzvp5Tjr5EVuUACfjnnud4rMUSpuDEf:NYAWYrxDuuc/DlEZ7S4lQd
TLSH
T1F6664A47ECA545A8C0EEE6318A729253BB717C584B3027D72F50F7282F76BD0AA79740
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	5444	2026-05-22_f763417719b7bea02f183417f83e4deb_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_p.exe

C:\Users\Admin\AppData\Local\Temp\2026-05-22_f763417719b7bea02f183417f83e4deb_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_p.exe
"C:\Users\Admin\AppData\Local\Temp\2026-05-22_f763417719b7bea02f183417f83e4deb_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_p.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:5444