4573d3ef6e44c5c8ea1e4a1d52d31b1ca786ec9df9874735653d98a888703c12

Analysis

max time kernel
150s
max time network
144s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/08/2026, 10:57

Target
2026-08-10_02a65c9933ef18bba2559c35eba0b357_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-st.exe
Size 28.6MB
Sample260810-m2ltlsfr41
SHA256 4573d3ef6e44c5c8ea1e4a1d52d31b1ca786ec9df9874735653d98a888703c12
MD5 02a65c9933ef18bba2559c35eba0b357
SHA1 f41ba2f97d4097fddef8f528f9cfbff54c365bd7
SHA512 2c9f0ef00803ab2f0e98d00d40ea2150c8510e0e72b6d0986d09f14c4d339d3b3a133c8ee387565c0c49ede3c0c52de7ac71d1aee0efecf2283775c383db4b36
SSDEEP 196608:sTadw8HxmY6F/2YHXTOewK977EseyV25FQbR468vwT:s18Hxm/2YHjOewkHELN5FQO
TLSH
T16B674A63E8B149E4C498E538C22581A27B72FC49473163C77A9AF7646F76BD06F3A340
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	4156	2026-08-10_02a65c9933ef18bba2559c35eba0b357_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-st.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-10_02a65c9933ef18bba2559c35eba0b357_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-st.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-10_02a65c9933ef18bba2559c35eba0b357_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-st.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4156