Analysis
- max time kernel
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
09/08/2026, 04:57
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_cb4e1f36d885e7c46e7584770e9ee6ae_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_kn.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_cb4e1f36d885e7c46e7584770e9ee6ae_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_kn.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-08-09_cb4e1f36d885e7c46e7584770e9ee6ae_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_kn.exe
- Size 36.9MB
- Sample260809-flft4atzax
- SHA256 2c88b2b2c51d366ac9fe02bddfa2ba59c8ab4734c5d94b97d0554a6028dec3d3
- MD5 cb4e1f36d885e7c46e7584770e9ee6ae
- SHA1 0eea32ca646fcfd1bcc9b73560f2f2cf57b56fdb
- SHA512 d65c993e97e7613f72cdb16fc36a02d811e22fce95642a6de379ec8bcc0c0f0e9fab499fb5621bbace05841ae6773e70a89a90061936637fd8547b0a473bc3c9
- SSDEEP 393216:06T5qDp8b1Tpo19OiYbBT9/lPc3q5ktQX:06T5qDp8b1cOD1v2q5L
- TLSH T110877B53E82588E8C19AE572C5629212FF707896DB3167D71F20E6B81F27BD06E7D308
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 2096 2026-08-09_cb4e1f36d885e7c46e7584770e9ee6ae_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_kn.exe 2096 2026-08-09_cb4e1f36d885e7c46e7584770e9ee6ae_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_kn.exe 2096 2026-08-09_cb4e1f36d885e7c46e7584770e9ee6ae_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_kn.exe 2096 2026-08-09_cb4e1f36d885e7c46e7584770e9ee6ae_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_kn.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-09_cb4e1f36d885e7c46e7584770e9ee6ae_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_kn.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-09_cb4e1f36d885e7c46e7584770e9ee6ae_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_kn.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
PID:2096