27abc395e3ffc01ee248eaf8651c5c10329fbd0480db30ee9c0d699ae0443de6

Analysis

max time kernel
150s
max time network
113s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
12/07/2026, 08:34

Target
2026-07-12_b7cf97855a2b9b05c38e2d915a5dbe58_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_ic.exe
Size 48.5MB
Sample260712-kgmt3agy2t
SHA256 27abc395e3ffc01ee248eaf8651c5c10329fbd0480db30ee9c0d699ae0443de6
MD5 b7cf97855a2b9b05c38e2d915a5dbe58
SHA1 a37f3d8b5cce2edbb683f0cca59f38ba2c10628d
SHA512 780d11f684918add85b727b950c33715db92add7fe5d454bc78bcc582deb73a550d1043929e87e60b309417b331a55308f0f567a61ddd76620a2908bc7d6c0ee
SSDEEP 393216:ZGQxJTQbUdwKdp92SpkATdc502fdYpoFAuk+XJkU3uwPfdGU1ysp8IR3HQBS:ZGQPTQbUxdplT6SO7lpkUF5l+SQBS
TLSH
T103B78D43B85548E9D9ADC930C9A652227B707C454B3177D72F60B238BF7A7E09AFA310
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
3260	2026-07-12_b7cf97855a2b9b05c38e2d915a5dbe58_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_ic.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-12_b7cf97855a2b9b05c38e2d915a5dbe58_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_ic.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-12_b7cf97855a2b9b05c38e2d915a5dbe58_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_ic.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:3260