Overview

overview

3

Static

static

3

2026-10-26..._p.exe

windows10-2004-x64

1

2026-10-26..._p.exe

windows11-ltsc_2024-x64

1

Analysis

  • max time kernel
    149s
  • max time network
    136s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    27/10/2026, 15:01

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-10-26_6cf26fdab8b26af4ea0ff03cb362be9d_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_p.exe
  • Size 11.3MB
  • Sample261027-sd48yadg96
  • SHA256 5b4334b4a2331d1ec625925c80ba9f576d6133ab18ca61a8de7fc97c4766304f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-10-26_6cf26fdab8b26af4ea0ff03cb362be9d_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_p.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-10-26_6cf26fdab8b26af4ea0ff03cb362be9d_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_p.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:5584
    • C:\Users\Admin\AppData\Local\Temp\2026-10-26_6cf26fdab8b26af4ea0ff03cb362be9d_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_p.exe
      C:\Users\Admin\AppData\Local\Temp\2026-10-26_6cf26fdab8b26af4ea0ff03cb362be9d_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_p.exe -test.run=^TestControllerProcessFixture$ -test.timeout=30s
      2⤵
        PID:892
      • C:\Users\Admin\AppData\Local\Temp\2026-10-26_6cf26fdab8b26af4ea0ff03cb362be9d_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_p.exe
        C:\Users\Admin\AppData\Local\Temp\2026-10-26_6cf26fdab8b26af4ea0ff03cb362be9d_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_p.exe -test.run=^TestControllerProcessFixture$ -test.timeout=30s
        2⤵
          PID:5088

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            controller.db
            • Path C:\Users\Admin\AppData\Local\Temp\TestMVPControllerRestartAndInterruptedExecution446583870\001\controller.db
            • Size 4KB
            • SHA256 da63a52bdf62b3fc863995d79f497584be3ba97c1de4c55d1d301afbafab6cfc
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            controller.db-wal
            • Path C:\Users\Admin\AppData\Local\Temp\TestMVPControllerRestartAndInterruptedExecution446583870\001\controller.db-wal
            • Size 442KB
            • SHA256 afd633d6dd5cab49f07255f7c7caa5ab350439bf5ac0f66366496771249f13ff
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download