Overview

overview

3

Static

static

3

2026-11-03..._p.exe

windows10-2004-x64

3

2026-11-03..._p.exe

windows11-ltsc_2024-x64

3

Analysis

  • max time kernel
    149s
  • max time network
    141s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    04/11/2026, 19:43

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-11-03_5b5a1dd38d44b513d549a11d6d989e54_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_p.exe
  • Size 8.9MB
  • Sample261104-yfbbjacz4x
  • SHA256 f76eaef678c1cbf45245581b7093a6f3ea2b7e3450a8f72487a385366bf3f394
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
discovery

Malware Config

Signatures

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

    discovery

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-11-03_5b5a1dd38d44b513d549a11d6d989e54_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_p.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-11-03_5b5a1dd38d44b513d549a11d6d989e54_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_p.exe"
    1⤵
    • Reads the TCP/IP host and domain name from the registry
    PID:2660

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        credit-history.json
        • Path C:\Users\Admin\AppData\Local\Temp\TestUpgEnterpriseUnlimitedSentinelNoFakeEntry3879775407\001\data\credit-history.json
        • Size 82B
        • SHA256 45b7fff413e47fd5552dae8a53713cf65a1cd955cad675668a4a0054e337934e
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        workbuddy-u1.json
        • Path C:\Users\Admin\AppData\Local\Temp\TestUpgImportNewAccountKeepsOldBaseline2925164425\001\auths\workbuddy-u1.json
        • Size 116B
        • SHA256 9db343edba957ca10e171b6d78ebfb642431c9b9c85f6aedd16bc83bcb0a500c
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        credit-history.json
        • Path C:\Users\Admin\AppData\Local\Temp\TestUpgImportNewAccountKeepsOldBaseline2925164425\001\data\credit-history.json
        • Size 82B
        • SHA256 575b007d79defe5ed0392dbb5fbb13dada85a5a314d328e97d29138291365672
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        workbuddy-u1.json
        • Path C:\Users\Admin\AppData\Local\Temp\TestUpgLateAddedAccountSnapshotsIndependent2916085493\001\auths\workbuddy-u1.json
        • Size 107B
        • SHA256 b05222d131db56dd935df888b798d8f9460bbcd352db2e075f4bc3ade2fdd190
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        credit-history.json
        • Path C:\Users\Admin\AppData\Local\Temp\TestUpgLateAddedAccountSnapshotsIndependent2916085493\001\data\credit-history.json
        • Size 270B
        • SHA256 422f22262c4b53dc4a22955a9b26f4c1ded199c4c43f5e3f43c1ee2831ba9823
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        credit-history.json.tmp
        • Path C:\Users\Admin\AppData\Local\Temp\TestUpgRestartContinuesBaseline3417875787\001\data\credit-history.json.tmp
        • Size 81B
        • SHA256 aa6cf79ff824e478ac38289a9bca53a55507f43020b5576038b5a4f435509d19
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        state.json
        • Path C:\Users\Admin\AppData\Local\Temp\TestUpgSecondQueryRecordsDeltaBothDirections4246308058\001\data\state.json
        • Size 36B
        • SHA256 8aa06fdc9ec22822d4556b205d9a6817283cac786c23f2b1f7753336dee584ee
        • MD5 SHA1 SHA512
        Submit Download

        credit-history.json
        • Path C:\Users\Admin\AppData\Local\Temp\TestUpgUpgradeFirstStartBuildsBaselineOnly702039220\001\data\credit-history.json
        • Size 82B
        • SHA256 14b1b6edb891fbc04cc09415d51cd996f76bc93cdeb3d7b5fafaf4cf7da35c2f
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        state.json
        • Path C:\Users\Admin\AppData\Local\Temp\TestUpgUpstreamFailureLeavesNoTrace902951637\001\data\state.json
        • Size 36B
        • SHA256 8c9c5a062e253a4c6a99702f5817a6105a83706c27083555ade0fd3fea97c758
        • MD5 SHA1 SHA512
        Submit Download