Analysis
- max time kernel
148s - max time network
149s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
09/08/2026, 08:27
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_3bce687f5871d4f2fa3cb795281a4e41_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_kn.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_3bce687f5871d4f2fa3cb795281a4e41_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_kn.exe
Resource
win11ltsc2024-20260710-en
1 signatures
150 seconds
General
- Target 2026-08-09_3bce687f5871d4f2fa3cb795281a4e41_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_kn.exe
- Size 18.4MB
- Sample260809-kcm92atfkb
- SHA256 faede32a468283eaa9ce90ebddf242f311e14345e27865a79d6cd0d5935361bc
- MD5 3bce687f5871d4f2fa3cb795281a4e41
- SHA1 53343dd1bee44d3306c7653ed29988e436c8b0b6
- SHA512 d643db05989d75e220d0f76a88ad2c7c2c1d3d24fade587606949572602fe3d226151cadac8e893df52b73d8c7090042751d605718e1f698fe43e4e35487b51c
- SSDEEP 196608:kpQf402soUHtHbkWfehoQoUvOSx/bELz/LrQGocw7qvW3nmZW:kCf402sbkWYoQoVSpUz/PVoKOWZW
- TLSH T1B1179D03E85714E9C499D630C9AA9223BB317C495B3263DB2FA0B7386E77BD05E79740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1416 2026-08-09_3bce687f5871d4f2fa3cb795281a4e41_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_kn.exe 1416 2026-08-09_3bce687f5871d4f2fa3cb795281a4e41_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_kn.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-09_3bce687f5871d4f2fa3cb795281a4e41_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_kn.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-09_3bce687f5871d4f2fa3cb795281a4e41_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_kn.exe"1⤵
- Suspicious use of SetWindowsHookEx
PID:1416