Overview

overview

3

Static

static

3

2026-11-03..._p.exe

windows10-2004-x64

3

2026-11-03..._p.exe

windows11-ltsc_2024-x64

3

Analysis

  • max time kernel
    150s
  • max time network
    140s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    04/11/2026, 19:43

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-11-03_5b5a1dd38d44b513d549a11d6d989e54_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_p.exe
  • Size 8.9MB
  • Sample261104-yfbbjacz4x
  • SHA256 f76eaef678c1cbf45245581b7093a6f3ea2b7e3450a8f72487a385366bf3f394
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
discovery

Malware Config

Signatures

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

    discovery

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-11-03_5b5a1dd38d44b513d549a11d6d989e54_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_p.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-11-03_5b5a1dd38d44b513d549a11d6d989e54_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_p.exe"
    1⤵
    • Reads the TCP/IP host and domain name from the registry
    PID:4912

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        credit-history.json
        • Path C:\Users\Admin\AppData\Local\Temp\TestUpgEnterpriseUnlimitedSentinelNoFakeEntry2011584309\001\data\credit-history.json
        • Size 91B
        • SHA256 02fc74677ede39deb08796acba7814bce36b60945702429da28223432e3443ee
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        workbuddy-u1.json
        • Path C:\Users\Admin\AppData\Local\Temp\TestUpgImportNewAccountKeepsOldBaseline3241947691\001\auths\workbuddy-u1.json
        • Size 116B
        • SHA256 bc3ba373b308caf96c29b65f2f171d9404fe956551d3c0a6ab3c1d5dcece9b91
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        credit-history.json
        • Path C:\Users\Admin\AppData\Local\Temp\TestUpgImportNewAccountKeepsOldBaseline3241947691\001\data\credit-history.json
        • Size 91B
        • SHA256 1ef5bea375a513eb9ed687c008a51a32451d4cab297174084fe016383b7c4232
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        workbuddy-u1.json
        • Path C:\Users\Admin\AppData\Local\Temp\TestUpgLateAddedAccountSnapshotsIndependent1456938823\001\auths\workbuddy-u1.json
        • Size 107B
        • SHA256 3da22413f8df29001e35078144506b21a107db53556dd7b33515fb4026b563eb
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        credit-history.json
        • Path C:\Users\Admin\AppData\Local\Temp\TestUpgLateAddedAccountSnapshotsIndependent1456938823\001\data\credit-history.json
        • Size 270B
        • SHA256 4f1bf05634e4f53484ea336c0edfa8997f65ae556d54cb47d4554ade5f5b162e
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        credit-history.json.tmp
        • Path C:\Users\Admin\AppData\Local\Temp\TestUpgRestartContinuesBaseline3840303844\001\data\credit-history.json.tmp
        • Size 81B
        • SHA256 8031d2943938b53f5d061b298e157be01163d47e5744f8545cccfe2677762c06
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        state.json
        • Path C:\Users\Admin\AppData\Local\Temp\TestUpgSecondQueryRecordsDeltaBothDirections1286344159\001\data\state.json
        • Size 36B
        • SHA256 8aa06fdc9ec22822d4556b205d9a6817283cac786c23f2b1f7753336dee584ee
        • MD5 SHA1 SHA512
        Submit Download

        credit-history.json
        • Path C:\Users\Admin\AppData\Local\Temp\TestUpgUpgradeFirstStartBuildsBaselineOnly255374846\001\data\credit-history.json
        • Size 82B
        • SHA256 0296b4aba323d64f2953a9e9a6110fb543f95dd15169acf65e21a583d61c4a0c
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        credit-history.json.tmp
        • Path C:\Users\Admin\AppData\Local\Temp\TestUpgUpstreamFailureLeavesNoTrace1735247909\001\data\credit-history.json.tmp
        • Size 82B
        • SHA256 06ad9d736514051ea241b5bcbaa6e9047d2695f25b24dc650ec587725c2e3f3c
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        state.json
        • Path C:\Users\Admin\AppData\Local\Temp\TestUpgUpstreamFailureLeavesNoTrace1735247909\001\data\state.json
        • Size 36B
        • SHA256 8c9c5a062e253a4c6a99702f5817a6105a83706c27083555ade0fd3fea97c758
        • MD5 SHA1 SHA512
        Submit Download