f4f7ee96dc11180f044645ff28ed768b2fb05488ba5ac8e4fd217b4e1aee794d

Analysis

max time kernel
149s
max time network
112s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
01/06/2026, 01:47

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-06-01_c981ddb13d31f68b7ff9c7559a332351_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Size 6.5MB
Sample260601-b71deabs8y
SHA256 f4f7ee96dc11180f044645ff28ed768b2fb05488ba5ac8e4fd217b4e1aee794d
MD5 c981ddb13d31f68b7ff9c7559a332351
SHA1 794064e1ed5dd881073f28f8b9f7706e446f1fd8
SHA512 278a9844adda8cc133aec781e85c9ded399f8f3c552fc2e7fd9259adef449c241be86e5a154ea599a2d4b5985a01a72efdbfd7433ef4ea894f3aa7d16a532a8d
SSDEEP 98304:hBKJCOK23M7hbj7c9GTEwqDGaWcRp8iDai3E:h4+toRpKd
TLSH
T1A5663907ECA554E9C1AED6308A629522FF617C480F2127D71BA0F6383F76BD0ADB9354
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 18 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BiosMajorRelease	2026-06-01_c981ddb13d31f68b7ff9c7559a332351_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BIOSVendor	2026-06-01_c981ddb13d31f68b7ff9c7559a332351_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU	2026-06-01_c981ddb13d31f68b7ff9c7559a332351_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemVersion	2026-06-01_c981ddb13d31f68b7ff9c7559a332351_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\ECFirmwareMinorRelease	2026-06-01_c981ddb13d31f68b7ff9c7559a332351_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\EnclosureType	2026-06-01_c981ddb13d31f68b7ff9c7559a332351_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BaseBoardVersion	2026-06-01_c981ddb13d31f68b7ff9c7559a332351_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BIOSVersion	2026-06-01_c981ddb13d31f68b7ff9c7559a332351_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	2026-06-01_c981ddb13d31f68b7ff9c7559a332351_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Key value enumerated	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	2026-06-01_c981ddb13d31f68b7ff9c7559a332351_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BiosMinorRelease	2026-06-01_c981ddb13d31f68b7ff9c7559a332351_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\ECFirmwareMajorRelease	2026-06-01_c981ddb13d31f68b7ff9c7559a332351_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BaseBoardManufacturer	2026-06-01_c981ddb13d31f68b7ff9c7559a332351_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BaseBoardProduct	2026-06-01_c981ddb13d31f68b7ff9c7559a332351_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	2026-06-01_c981ddb13d31f68b7ff9c7559a332351_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BIOSReleaseDate	2026-06-01_c981ddb13d31f68b7ff9c7559a332351_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemFamily	2026-06-01_c981ddb13d31f68b7ff9c7559a332351_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	2026-06-01_c981ddb13d31f68b7ff9c7559a332351_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe

C:\Users\Admin\AppData\Local\Temp\2026-06-01_c981ddb13d31f68b7ff9c7559a332351_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
"C:\Users\Admin\AppData\Local\Temp\2026-06-01_c981ddb13d31f68b7ff9c7559a332351_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe"
1⤵
- Enumerates system info in registry
PID:4048

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads