d662ba55287d587d3ceb3e2b09e7e596e7d999ea220dc283c6df661c369add3f

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260629-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
29/06/2026, 16:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-06-26_3a98e247cb96b3f5707cb63f4339584d_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-st.exe
Size 5.9MB
Sample260629-va526sh121
SHA256 d662ba55287d587d3ceb3e2b09e7e596e7d999ea220dc283c6df661c369add3f
MD5 3a98e247cb96b3f5707cb63f4339584d
SHA1 8b0a266a485f87c7b2edcf1fe9de110f2ad54c53
SHA512 4d59a846518ec61fdd743d434b0bc036e6a9548abe382c3a46f343f79889e576e7d0ddc90c1beb543463d62e0f3ec4e631adac0bed2377714b509292d7f6d958
SSDEEP 49152:Wsm4VpmNKyfp9/p3wfHtiLHqyZ9Of+fVvlZDjf5EMmTSpkoJf7P2RlWXRGO:Dy3mpyZ4fGREmzPGE1
TLSH
T13C564A47ECA145E8C0EAD635C9229253BA717C585F3563D73B60F7282F76BD0AAB9300
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

defense_evasion

Malware Config

Signatures

Looks for VirtualBox drivers on disk 2 TTPs 1 IoCs

defense_evasion

File and Directory Discovery

T1083

Virtualization/Sandbox Evasion

T1497

description	ioc	Process
File opened (read-only)	C:\Windows\System32\drivers\VBoxGuest.sys	2026-06-26_3a98e247cb96b3f5707cb63f4339584d_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-st.exe

Looks for VMWare drivers on disk 2 TTPs 1 IoCs

defense_evasion

File and Directory Discovery

T1083

Virtualization/Sandbox Evasion

T1497

description	ioc	Process
File opened (read-only)	C:\Windows\System32\drivers\vmci.sys	2026-06-26_3a98e247cb96b3f5707cb63f4339584d_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-st.exe

C:\Users\Admin\AppData\Local\Temp\2026-06-26_3a98e247cb96b3f5707cb63f4339584d_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-st.exe
"C:\Users\Admin\AppData\Local\Temp\2026-06-26_3a98e247cb96b3f5707cb63f4339584d_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-st.exe"
1⤵
- Looks for VirtualBox drivers on disk
- Looks for VMWare drivers on disk
PID:3324

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1497

Credential Access

Discovery

File and Directory Discovery

T1083

Virtualization/Sandbox Evasion

T1497

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads