e4c6579bdbaf4fe8107f313ac2a98819d0c0d876c5cb54c4bec85548edbfe9f4

Analysis

max time kernel
150s
max time network
152s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
16/09/2026, 10:58

Target
2026-09-16_8b5a7893853ca1f9051d359ac1cc6079_cobalt-strike_coinminer_frostygoop_glassworm_hive_luca-s.exe
Size 3.5MB
Sample260916-m3cbkaxtaz
SHA256 e4c6579bdbaf4fe8107f313ac2a98819d0c0d876c5cb54c4bec85548edbfe9f4
MD5 8b5a7893853ca1f9051d359ac1cc6079
SHA1 e9987c25e59e3d77b0c60b5701aae91873efef02
SHA512 e856dac6e31369d769263dc81ccbf4e916bdeaca681ca2f803d58371b6177874e33f481903c066fd1af4d140ece4f1ca5b08412d7095a984a710d5dc303f58c9
SSDEEP 49152:1L20yESWgl6rb/TmvO90d7HjmAFd4A64nsfJYlarQCjSHk6AkQ2sgNIAeaV4pIw4:XSWglrIBQJ
TLSH
T175062947B89551A8C5AED2358A2A92527B717C885B3033D33F60F7B82F32BD45E7A314
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3080	2026-09-16_8b5a7893853ca1f9051d359ac1cc6079_cobalt-strike_coinminer_frostygoop_glassworm_hive_luca-s.exe
3080	2026-09-16_8b5a7893853ca1f9051d359ac1cc6079_cobalt-strike_coinminer_frostygoop_glassworm_hive_luca-s.exe

C:\Users\Admin\AppData\Local\Temp\2026-09-16_8b5a7893853ca1f9051d359ac1cc6079_cobalt-strike_coinminer_frostygoop_glassworm_hive_luca-s.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-16_8b5a7893853ca1f9051d359ac1cc6079_cobalt-strike_coinminer_frostygoop_glassworm_hive_luca-s.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:3080