Analysis
- max time kernel
150s - max time network
146s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
10/08/2026, 02:19
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-10_85eae18403eec58cd425725ca0d3fe0b_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_kn.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_85eae18403eec58cd425725ca0d3fe0b_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_kn.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-08-10_85eae18403eec58cd425725ca0d3fe0b_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_kn.exe
- Size 10.0MB
- Sample260810-csad4sttc1
- SHA256 48640124ba43d5868cae40e6bbee814141385cb0c0b65321e06ba24fdde6ff66
- MD5 85eae18403eec58cd425725ca0d3fe0b
- SHA1 02c0675acb9081d072bba8930a89bce3108088f3
- SHA512 421e67af7f2c7ff74108c69dfce40b5bca429ec8d4070ff8a7bbdcbbe03a74fd5db25d7df4961cfa2a525cda8e59e88e4e7ea67e23ada11eef5cdd8905b88218
- SSDEEP 98304:dKDkfNtJRewE5zumj45qCsQBErhN9oQHbccwiYqla0AN0x0YKPwXohK+6X:dKDkf7Jy5CX5qdrh5brTs0A+x0h6kK+
- TLSH T1BDB68C43EC9149E9C1AAA230C9B69253BB717C495B3263D72B50F7382F73BC06A79714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
flow ioc 2 discord.com 4 discord.com