14beac9a524e5b03d8c4d91173d3cd2384800f70693b792479b2fc9d2bd92c8b

Analysis

max time kernel
149s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
16/09/2026, 10:19

Target
2026-09-16_9e0a0258b151deb5800c22d28cc7b275_cobalt-strike_coinminer_frostygoop_glassworm_hive_luca-s.exe
Size 3.5MB
Sample260916-mcghlaae49
SHA256 14beac9a524e5b03d8c4d91173d3cd2384800f70693b792479b2fc9d2bd92c8b
MD5 9e0a0258b151deb5800c22d28cc7b275
SHA1 f03f9164c2bbf12aa5c6ebfa896eee67d01422ac
SHA512 af6df2fc94810ac1dd2144973aafc1c485bddca806e21cdd5a5ac9a4170e068145ee4c1ecc3330efc37d96b2c482c98c8e0fbba2e22088d889788c908948a0c3
SSDEEP 49152:isqDq7Xvzwrb/TbvO90d7HjmAFd4A64nsfJgeQtROwASXwoCOjWik52sgNIAeaVJ:lXvzee5QgjC
TLSH
T1C8062947FC9541A5C1AED2358A269252BA717C881B3423D33F60F7B82F32BD45E7A364
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4736	2026-09-16_9e0a0258b151deb5800c22d28cc7b275_cobalt-strike_coinminer_frostygoop_glassworm_hive_luca-s.exe
4736	2026-09-16_9e0a0258b151deb5800c22d28cc7b275_cobalt-strike_coinminer_frostygoop_glassworm_hive_luca-s.exe

C:\Users\Admin\AppData\Local\Temp\2026-09-16_9e0a0258b151deb5800c22d28cc7b275_cobalt-strike_coinminer_frostygoop_glassworm_hive_luca-s.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-16_9e0a0258b151deb5800c22d28cc7b275_cobalt-strike_coinminer_frostygoop_glassworm_hive_luca-s.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4736