0a745b107efe2a0e42c0ce201c0234737f454319e150f76d9133958fe1404da0

Analysis

max time kernel
150s
max time network
152s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
07/08/2026, 06:46

Target
2026-08-07_b884d6cc74177a5bc7e9b5dd33437c11_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-st.exe
Size 9.1MB
Sample260807-hjvataee34
SHA256 0a745b107efe2a0e42c0ce201c0234737f454319e150f76d9133958fe1404da0
MD5 b884d6cc74177a5bc7e9b5dd33437c11
SHA1 4e648cc0a3d6dfaf898f892c2daad35c259cf6a6
SHA512 214c4dafdbf2f1efccfa701050f143d116ebd88dcb0656bb573159e3bdb15f5a434b5ffe28c0de4475a3358d0c3272e507cfa3bd0a0c312021ff28200d756b00
SSDEEP 98304:FhtWCcLN5SVwU/4rVLqBTWo/IRmfyMtEC/9:FntciVwUMVLqoRmfyM+C/9
TLSH
T101A66B07ECA504E9C2ADD174C9629263BA727C489B3127D73B50FB283F76BC06A79750
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeShutdownPrivilege	5860	2026-08-07_b884d6cc74177a5bc7e9b5dd33437c11_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-st.exe
Token: SeDebugPrivilege	5860	2026-08-07_b884d6cc74177a5bc7e9b5dd33437c11_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-st.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-07_b884d6cc74177a5bc7e9b5dd33437c11_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-st.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-07_b884d6cc74177a5bc7e9b5dd33437c11_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-st.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:5860