Analysis
- max time kernel
148s - max time network
143s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
24/07/2026, 16:22
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-24_6953009f18f475899b52cb7fc69a712c_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-24_6953009f18f475899b52cb7fc69a712c_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target 2026-07-24_6953009f18f475899b52cb7fc69a712c_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_.exe
- Size 3.6MB
- Sample260724-tvfscatfnc
- SHA256 3aaa4551b2e750fed6432b0fe1120bb945a3a1a91e4a9d08dd33765c60d3554f
- MD5 6953009f18f475899b52cb7fc69a712c
- SHA1 66248570ca9fdb34b56f528924624523fa222452
- SHA512 3e6afa7a0e85bedb4d772bf715ad592c166a7cfa7f6d8d9bae17fe8c4451f3f62294ca90db1f8eb60b4fd6f49be9467038e2c05800bdc1f0cef34b0279403b80
- SSDEEP 49152:/8qK5fq4XrgI33xb05dxB/hhp0EgrN7OI+rvklR/HCh8dDRY:/iIid0yHoZqRPW8dD6
- TLSH T128067C13EC9158F6C099A23189B396427B75BC0D1B3637EB2E60BB782E727D05D3A714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
pid Process 2440 2026-07-24_6953009f18f475899b52cb7fc69a712c_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_.exe - Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 2440 2026-07-24_6953009f18f475899b52cb7fc69a712c_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_.exe 2440 2026-07-24_6953009f18f475899b52cb7fc69a712c_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_.exe 2440 2026-07-24_6953009f18f475899b52cb7fc69a712c_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_.exe 2440 2026-07-24_6953009f18f475899b52cb7fc69a712c_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_.exe 2440 2026-07-24_6953009f18f475899b52cb7fc69a712c_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_.exe 2440 2026-07-24_6953009f18f475899b52cb7fc69a712c_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-24_6953009f18f475899b52cb7fc69a712c_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-24_6953009f18f475899b52cb7fc69a712c_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
PID:2440