9cd956e6bf366903e09ccc200b0fb51a398761937cd4fceebcd1e2965cab17ad

Analysis

max time kernel
150s
max time network
116s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/10/2026, 02:57

Target
2026-10-26_eea669d5d125966f13f41410cafbf291_coinminer_glassworm_snatch.exe
Size 4.2MB
Sample261027-df4ymaaz8n
SHA256 9cd956e6bf366903e09ccc200b0fb51a398761937cd4fceebcd1e2965cab17ad
MD5 eea669d5d125966f13f41410cafbf291
SHA1 8771c4adcd3d378efe426a587d7d20d6a9882f17
SHA512 6f0934f2c4b2ca9d778fd063da003a8dd8f69dd98c91cfbece86b410ce7ae6d1ece6d9d124a9e1b3b8943f412b4a1c0412c4d0cc845cba13692c91d77dcfc361
SSDEEP 49152:ITqBtp2GaB3swPCF2/gQKekDccNbG0upqnXVyYA5LCfpYlc:IT6MxxUwLmfp
TLSH
T14C164B17FCA518E6C4AED1318966A1537B717C881F2123E72B50B6382F77BD0AEB9344
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

System Network Configuration Discovery

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	2026-10-26_eea669d5d125966f13f41410cafbf291_coinminer_glassworm_snatch.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	2026-10-26_eea669d5d125966f13f41410cafbf291_coinminer_glassworm_snatch.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-26_eea669d5d125966f13f41410cafbf291_coinminer_glassworm_snatch.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-26_eea669d5d125966f13f41410cafbf291_coinminer_glassworm_snatch.exe"
1⤵
- Reads the TCP/IP host and domain name from the registry
PID:4176

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact