Analysis
- max time kernel
148s - max time network
117s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
01/09/2026, 22:02
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-01_09319e8c243fc8599a87398a23c2d968_cobalt-strike_coinminer_frostygoop_glassworm_hive_luca-s.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-01_09319e8c243fc8599a87398a23c2d968_cobalt-strike_coinminer_frostygoop_glassworm_hive_luca-s.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
General
- Target 2026-09-01_09319e8c243fc8599a87398a23c2d968_cobalt-strike_coinminer_frostygoop_glassworm_hive_luca-s.exe
- Size 9.1MB
- Sample260901-1yah3ayarf
- SHA256 ff8ef9fa9bc2e642efe1403dd395ba7a0e5644897f7a1118b1e2249a158492bd
- MD5 09319e8c243fc8599a87398a23c2d968
- SHA1 e7b743859150b36fed6475fb22cdbc10b28faf42
- SHA512 03767d6da66552b35161904fabb9f373e3118c12dc2bad10d5300b3a31087a29d0fb8c52f9efe87fded20798e73526e4ac0d60385885310cecfb3299b683577c
- SSDEEP 196608:OdJ3Dsetf065c12SWh1WdlncGWnCeZGKjphLxjRTAjiM:oDsetfZYwWHICXC9VAZ
- TLSH T113A6014BBC9145B8C4AEE2308A6A92527B307C891F3063D73A50F7B82F76BD45E79354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Malware Config
Signatures
- Detects executables containing URLs to raw contents of a Github gist 5 IoCs
resource yara_rule behavioral2/memory/4916-7-0x000001AE7DCB0000-0x000001AE7FEC7000-memory.dmp INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL behavioral2/memory/4916-8-0x000001AE7DCB0000-0x000001AE7FEC7000-memory.dmp INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL behavioral2/memory/4916-6-0x000001AE7DCB0000-0x000001AE7FEC7000-memory.dmp INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL behavioral2/memory/4916-9-0x000001AE7DCB0000-0x000001AE7FEC7000-memory.dmp INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL behavioral2/memory/4916-11-0x000001AE7DCB0000-0x000001AE7FEC7000-memory.dmp INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL - UPX dump on OEP (original entry point) 6 IoCs
resource yara_rule behavioral2/memory/4916-1-0x000001AE7DCB0000-0x000001AE7FEC7000-memory.dmp UPX behavioral2/memory/4916-7-0x000001AE7DCB0000-0x000001AE7FEC7000-memory.dmp UPX behavioral2/memory/4916-8-0x000001AE7DCB0000-0x000001AE7FEC7000-memory.dmp UPX behavioral2/memory/4916-6-0x000001AE7DCB0000-0x000001AE7FEC7000-memory.dmp UPX behavioral2/memory/4916-9-0x000001AE7DCB0000-0x000001AE7FEC7000-memory.dmp UPX behavioral2/memory/4916-11-0x000001AE7DCB0000-0x000001AE7FEC7000-memory.dmp UPX -
resource yara_rule behavioral2/memory/4916-1-0x000001AE7DCB0000-0x000001AE7FEC7000-memory.dmp upx behavioral2/memory/4916-7-0x000001AE7DCB0000-0x000001AE7FEC7000-memory.dmp upx behavioral2/memory/4916-8-0x000001AE7DCB0000-0x000001AE7FEC7000-memory.dmp upx behavioral2/memory/4916-6-0x000001AE7DCB0000-0x000001AE7FEC7000-memory.dmp upx behavioral2/memory/4916-9-0x000001AE7DCB0000-0x000001AE7FEC7000-memory.dmp upx behavioral2/memory/4916-11-0x000001AE7DCB0000-0x000001AE7FEC7000-memory.dmp upx