7e8353206c66d9c7f75cc7a9e36a7f679ffc209ac8fc49ede3b5e083c8deac6c

Analysis

max time kernel
149s
max time network
135s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
06/10/2026, 13:03

Target
2026-10-06_607a129778c3e26d20a7b983bd1d7e3c_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Size 33.7MB
Sample261006-qagblafa53
SHA256 7e8353206c66d9c7f75cc7a9e36a7f679ffc209ac8fc49ede3b5e083c8deac6c
MD5 607a129778c3e26d20a7b983bd1d7e3c
SHA1 05fe967f68096053a7470ea747587ca3a5d5cc35
SHA512 8caa8fee6618131fca4f6ed6b1f89e2579e4c4af3c669defb90eb59f64deb1e7c1e938c16cf8c04dbb415d3cb093f1314990ebecafa12658e8ee67048b6d62fb
SSDEEP 786432:oXv+1P6wRGNMcf/0XNfoo6L3Dyslf/YEXw+4IuUisnFK:oXv+1P6iGNMcf/0XNfoo6L3Dyslf/YE5
TLSH
T1E177F843F96984EAD0AEE57486669213BB703C58573173E79F61B6202B3AFD064FE310
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Reads the TCP/IP host and domain name from the registry 1 TTPs 1 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

System Network Configuration Discovery

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	2026-10-06_607a129778c3e26d20a7b983bd1d7e3c_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-06_607a129778c3e26d20a7b983bd1d7e3c_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-06_607a129778c3e26d20a7b983bd1d7e3c_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe"
1⤵
- Reads the TCP/IP host and domain name from the registry
PID:5720

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact