20585d6223a398aa37b2d7da79496b44572ed30a7d5b9065bd140f2e57d490cd

Analysis

max time kernel
150s
max time network
142s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260706-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260706-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
06/07/2026, 23:45

Target
2026-07-06_fb8d93b12a09dc763eacdd88d5c52b34_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Size 16.5MB
Sample260706-3rtpgadv5y
SHA256 20585d6223a398aa37b2d7da79496b44572ed30a7d5b9065bd140f2e57d490cd
MD5 fb8d93b12a09dc763eacdd88d5c52b34
SHA1 331dbe3ec7e94d2035b4e1ea1f46549593d67d2c
SHA512 395b5b2ec535c63e479603a7d3a5628be91ce99ff71056358d31c0d1f0e1965d3d20f12f2ad1b006780eaeb46b5c58ec8e4d46e388c0698a0095d3786d887c7e
SSDEEP 196608:s+Lc0kMxG8OWolWDDzUwEM2RHgvGkBwt3Se:sH0k/WolWbOMNvGkBwNS
TLSH
T15D077C47E89909E9C49DD230C5B6D2237B717C484B3227C72B60B6786F76BD0AEB9344
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

flow	ioc
1	pastebin.com
2	pastebin.com

C:\Users\Admin\AppData\Local\Temp\2026-07-06_fb8d93b12a09dc763eacdd88d5c52b34_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-06_fb8d93b12a09dc763eacdd88d5c52b34_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe"
1⤵
PID:1520

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact