Analysis
- max time kernel
149s - max time network
149s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
22/05/2026, 03:58
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-22_b17e5503d22ead55d9d0d77c6256d25f_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-22_b17e5503d22ead55d9d0d77c6256d25f_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win11-20260513-en
1 signatures
150 seconds
General
- Target 2026-05-22_b17e5503d22ead55d9d0d77c6256d25f_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
- Size 6.6MB
- Sample260522-ejrm5sdy8q
- SHA256 c7d4739b294182ff9c47ca439ee69a447a817e85cfe2b66fe7cd1d805d4907c9
- MD5 b17e5503d22ead55d9d0d77c6256d25f
- SHA1 277a637d107192a696169cd908b47e427ef10c9a
- SHA512 63adeb4279d3e6a312a034e53f887bdc6d52cd0cf7fafd7d65bb8d21d008a9aec96ca985ff519be03916dbfaa0b7ae43e5ec0bb41f8dee9377c7d4eb16b3d94d
- SSDEEP 49152:VEudmkeiF2hz2IyXGPGSdWChw1+ywtFdpanM17H7VWbb5DKQK1K6xVqV5rB5E:VEQ3h2FdTFjqhAxVYJE
- TLSH T178664843ECA515E9C5ADD73189669262BB21BC482F3163D72B50F3282F73BD0ADB9350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Modifies registry class 7 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2654269261-3199571979-4291878722-1000_Classes\*\shell\SubmitToVirusTotal 2026-05-22_b17e5503d22ead55d9d0d77c6256d25f_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe Key created \REGISTRY\USER\S-1-5-21-2654269261-3199571979-4291878722-1000_Classes\* 2026-05-22_b17e5503d22ead55d9d0d77c6256d25f_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe Key created \REGISTRY\USER\S-1-5-21-2654269261-3199571979-4291878722-1000_Classes\*\shell 2026-05-22_b17e5503d22ead55d9d0d77c6256d25f_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe Set value (str) \REGISTRY\USER\S-1-5-21-2654269261-3199571979-4291878722-1000_Classes\*\shell\SubmitToVirusTotal\ = "Submit to VirusTotal" 2026-05-22_b17e5503d22ead55d9d0d77c6256d25f_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe Set value (str) \REGISTRY\USER\S-1-5-21-2654269261-3199571979-4291878722-1000_Classes\*\shell\SubmitToVirusTotal\Icon = "\"C:\\Users\\Admin\\AppData\\Local\\Temp\\2026-05-22_b17e5503d22ead55d9d0d77c6256d25f_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe\",0" 2026-05-22_b17e5503d22ead55d9d0d77c6256d25f_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe Key created \REGISTRY\USER\S-1-5-21-2654269261-3199571979-4291878722-1000_Classes\*\shell\SubmitToVirusTotal\command 2026-05-22_b17e5503d22ead55d9d0d77c6256d25f_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe Set value (str) \REGISTRY\USER\S-1-5-21-2654269261-3199571979-4291878722-1000_Classes\*\shell\SubmitToVirusTotal\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Temp\\2026-05-22_b17e5503d22ead55d9d0d77c6256d25f_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe\" \"%1\"" 2026-05-22_b17e5503d22ead55d9d0d77c6256d25f_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-05-22_b17e5503d22ead55d9d0d77c6256d25f_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe"C:\Users\Admin\AppData\Local\Temp\2026-05-22_b17e5503d22ead55d9d0d77c6256d25f_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe"1⤵
- Modifies registry class
PID:3840