d01b25f288eb9c0c2af5c8f8e81702f2a4d4668e143a00112f9158764c830a2a

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/09/2026, 17:56

Target
2026-09-10_3c0410693e592ef84a11f1f5fb07b058_cobalt-strike_coinminer_dosia_frostygoop_glassworm_hive_.exe
Size 10.9MB
Sample260910-wh1yvseq2z
SHA256 d01b25f288eb9c0c2af5c8f8e81702f2a4d4668e143a00112f9158764c830a2a
MD5 3c0410693e592ef84a11f1f5fb07b058
SHA1 1628a6aaeb0edfd313d6a54df921f3001f60d266
SHA512 2110e4deeae219f6a06199c547db1aae8e2612d7bdd503c8d6d9a9202321535ce43c5c21b9ced94271d60e03d3981381cb37ea3056f114dddc24966e1680f9e4
SSDEEP 49152:X8W0PMcxCBRZjttVnrb/TgvO90d7HjmAFd4A64nsfJ6f6BHCuSWOrLG+modZNTi/:bRtv2K3POGmDr5SYZEPiH5Y2gD
TLSH
T1ADC63A43F89045E8C1EED170C9668262BA707C894F3463D73B60F6B52B73BE4AA79354
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
3968	2026-09-10_3c0410693e592ef84a11f1f5fb07b058_cobalt-strike_coinminer_dosia_frostygoop_glassworm_hive_.exe
3968	2026-09-10_3c0410693e592ef84a11f1f5fb07b058_cobalt-strike_coinminer_dosia_frostygoop_glassworm_hive_.exe
3968	2026-09-10_3c0410693e592ef84a11f1f5fb07b058_cobalt-strike_coinminer_dosia_frostygoop_glassworm_hive_.exe
3968	2026-09-10_3c0410693e592ef84a11f1f5fb07b058_cobalt-strike_coinminer_dosia_frostygoop_glassworm_hive_.exe

C:\Users\Admin\AppData\Local\Temp\2026-09-10_3c0410693e592ef84a11f1f5fb07b058_cobalt-strike_coinminer_dosia_frostygoop_glassworm_hive_.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-10_3c0410693e592ef84a11f1f5fb07b058_cobalt-strike_coinminer_dosia_frostygoop_glassworm_hive_.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:3968