2c45bc052c13c27ad6c2adcde26435faf0c506fa26791ae3c53d12bacc076611

Analysis

max time kernel
150s
max time network
151s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
23/07/2026, 05:44

Target
2026-07-23_d4fbb6936f2a2461408f851696c19cd4_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Size 10.9MB
Sample260723-gfgpwagg78
SHA256 2c45bc052c13c27ad6c2adcde26435faf0c506fa26791ae3c53d12bacc076611
MD5 d4fbb6936f2a2461408f851696c19cd4
SHA1 7bbf18ea297a9e9e596dd2b4267903f73b9f6514
SHA512 caa9ce37322956014a193058f415d69528ef491a34ebeacdb2682b017ed1fdb12fcf9902b92e97d047c8207a871936866ed245a2fd3743e9d0623724e81c69cd
SSDEEP 98304:WYTKa3g973UtFSK1ZXz4IOr+Ewbt6Vc39YoHDKKXBpplYbSVXFZoW3:WN0ghgXzFUmIcNYoHmKxppljdFr3
TLSH
T151B67B43F99554E9C1ADA232C9B682137B71BC490B3223D71B90B6387F76BD06EB9344
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

flow	ioc
1	discord.com
3	discord.com

C:\Users\Admin\AppData\Local\Temp\2026-07-23_d4fbb6936f2a2461408f851696c19cd4_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-23_d4fbb6936f2a2461408f851696c19cd4_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe"
1⤵
PID:4468

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact