5720e8b9189e99397b2cd506feff662d7f9ce5254092794a7e35d36526551e77

Analysis

max time kernel
150s
max time network
129s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
29/10/2026, 14:33

Target
2026-10-29_42f49454b531f017407905322e7bd4cf_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Size 6.3MB
Sample261029-rw2ebsdy2p
SHA256 5720e8b9189e99397b2cd506feff662d7f9ce5254092794a7e35d36526551e77
MD5 42f49454b531f017407905322e7bd4cf
SHA1 eb17fe28863d5feedad63bc3eb1df3def81e097e
SHA512 2dee4ae1e5650b2645037ea4bfb29811b6c6dc311ba95bd5335b85de2282274c81076aad87c1d198fa9594c525ad98e322748c3343709efc5e0d6edf2873ca57
SSDEEP 49152:SvyjbW9QhrGuIUcaqboS2MVAXOp7CXkO1zg9eDnm3mKlN5YPQNDVKQK1K6Ji63B8:SvMCMjFG9oyBTqJi63BE
TLSH
T100662703ED6515E8C1AEE23189B29553BB717C494B2223D72B90F7382F76BD0ADB9350
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

System Network Configuration Discovery

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	2026-10-29_42f49454b531f017407905322e7bd4cf_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	2026-10-29_42f49454b531f017407905322e7bd4cf_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-29_42f49454b531f017407905322e7bd4cf_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-29_42f49454b531f017407905322e7bd4cf_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe"
1⤵
- Reads the TCP/IP host and domain name from the registry
PID:3120

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact