a90e0de44858f671354db6888d60ad873749d3e927d3f3c12b98f1420afd392b

Analysis

max time kernel
150s
max time network
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
16/09/2026, 09:39

Target
2026-09-16_b5e4d0a7e12fb9e7c327107162ce7e90_cobalt-strike_coinminer_frostygoop_glassworm_hive_luca-s.exe
Size 3.5MB
Sample260916-lmvmjaybrd
SHA256 a90e0de44858f671354db6888d60ad873749d3e927d3f3c12b98f1420afd392b
MD5 b5e4d0a7e12fb9e7c327107162ce7e90
SHA1 4165b59c195ddfe39ab53e5628eaf556f0c29eb5
SHA512 ee334d2540a2c706eb66263a4750fcfdc84aea76d2d10ccf2ba7bafd1773da59ce50c1d7c857d8bba7744ffe432f68bebaf0aaac0c1c376aaafbf7a9ee8cd798
SSDEEP 49152:s8AA1z188rLAwrb/T0vO90d7HjmAFd4A64nsfJ225QuoBt26uk62sgNIAPaV4vIu:l18uIHfl
TLSH
T1FEF52807B89451A8D5AED231CA2692527A717C881B3073D33F60F7B92F32BD45E7A358
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5848	2026-09-16_b5e4d0a7e12fb9e7c327107162ce7e90_cobalt-strike_coinminer_frostygoop_glassworm_hive_luca-s.exe
5848	2026-09-16_b5e4d0a7e12fb9e7c327107162ce7e90_cobalt-strike_coinminer_frostygoop_glassworm_hive_luca-s.exe

C:\Users\Admin\AppData\Local\Temp\2026-09-16_b5e4d0a7e12fb9e7c327107162ce7e90_cobalt-strike_coinminer_frostygoop_glassworm_hive_luca-s.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-16_b5e4d0a7e12fb9e7c327107162ce7e90_cobalt-strike_coinminer_frostygoop_glassworm_hive_luca-s.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:5848