e3907bcd7b6dc3b6419f203d1b8943786b1ab173ceb46c03a39dbcf82157b545

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
23/10/2026, 18:00

Target
2026-10-22_d8678ec513b245f68fcfa54d3fcd2300_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Size 42.6MB
Sample261023-wljtracz8x
SHA256 e3907bcd7b6dc3b6419f203d1b8943786b1ab173ceb46c03a39dbcf82157b545
MD5 d8678ec513b245f68fcfa54d3fcd2300
SHA1 3e429c0da5a1d10dc0b023940a6176798452b446
SHA512 c23d11b25543556751f3fac136c5bf1affc6cbaa0ecb28e6a863cb12f170d8bd4de1eb8f448cf45ecd00751c495ac16c2634c2277b282cb7695bbef4a7098b3d
SSDEEP 196608:H9/GEAUO/vPGdbyxaX3OoSmHQhmrJaWgyI0/8YDU00X:HQ5UOPY5bHWmlMz0/8Y+
TLSH
T136A74A17F8A948E9D1EEC139CA664613BB727C994B3123D31F50B6202F7EBD4A57A340
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Reads the TCP/IP host and domain name from the registry 1 TTPs 1 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

System Network Configuration Discovery

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	2026-10-22_d8678ec513b245f68fcfa54d3fcd2300_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-22_d8678ec513b245f68fcfa54d3fcd2300_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-22_d8678ec513b245f68fcfa54d3fcd2300_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe"
1⤵
- Reads the TCP/IP host and domain name from the registry
PID:3344

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact