f28459b63404d13fd8f78c7b3824a5456875ef674e5e6906312d37a8172d312b

Analysis

max time kernel
148s
max time network
143s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/11/2026, 14:20

Target
2026-11-09_822ed61a246dbabcc8faff0225f7add9_coinminer_dosia_glassworm_quasar-rat_snatch.exe
Size 3.8MB
Sample261110-rnp2bsvscx
SHA256 f28459b63404d13fd8f78c7b3824a5456875ef674e5e6906312d37a8172d312b
MD5 822ed61a246dbabcc8faff0225f7add9
SHA1 a36415d64bd2656b54d417dad67795f5e1616fe7
SHA512 f1f5a341a1266d45500fe931447cf6dea22d41d7d387c6e60b5ebe7e6af3001dee061e5a54c9eed3b9e527782baac9ef555a28452100986b0c4bedbb696043aa
SSDEEP 49152:WV4+kxR4+5H0q4RvGIDLj20LGz2KoPHxvBO1zKyKhK3S5E:WVRMRD6AgM2E
TLSH
T189064A03FDA519EAC0EED2318AA695537B717C481B3023D72A60BA782FB7BD05D79314
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Reads the TCP/IP host and domain name from the registry 1 TTPs 1 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

System Network Configuration Discovery

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	2026-11-09_822ed61a246dbabcc8faff0225f7add9_coinminer_dosia_glassworm_quasar-rat_snatch.exe

C:\Users\Admin\AppData\Local\Temp\2026-11-09_822ed61a246dbabcc8faff0225f7add9_coinminer_dosia_glassworm_quasar-rat_snatch.exe
"C:\Users\Admin\AppData\Local\Temp\2026-11-09_822ed61a246dbabcc8faff0225f7add9_coinminer_dosia_glassworm_quasar-rat_snatch.exe"
1⤵
- Reads the TCP/IP host and domain name from the registry
PID:5620

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact