General
- Target 2026-08-12_6f5cb7dbb9865ef622db25c3546e5cec_coinminer_dosia_glassworm_poet-rat_quasar-rat_remcos_snatch
- Size 10.7MB
- Sample260812-d6q5fsac83
- SHA256 162a75b3c7f0abff82cf8f07e27319ee4c934c8df71ec553fa1dfde97f0b6d22
- MD5 6f5cb7dbb9865ef622db25c3546e5cec
- SHA1 a7e0910a9406f1c911eb9c7b997ae4a8308c49d0
- SHA512 4f7867ac32e9391f58be894f78db2594e60a857d11845263c8adc5d34207a6de18fbe5ff4fa16b90cc24ad67a2d272032edb0ec30f8d324d5602a330fc38a92c
- SSDEEP 98304:iskqzCe3Hz1jKS4ZwjzROFdHFlVblKgKdPiz74s7rnChE:iA+sF68Ld2bii
- TLSH T111B6AE03FC5614E5D06E8675C6B39266BF713C440B6027D33B58B2246F7ABC4AEBA358
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-12_6f5cb7dbb9865ef622db25c3546e5cec_coinminer_dosia_glassworm_poet-rat_quasar-rat_remcos_snatch.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-12_6f5cb7dbb9865ef622db25c3546e5cec_coinminer_dosia_glassworm_poet-rat_quasar-rat_remcos_snatch.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_6f5cb7dbb9865ef622db25c3546e5cec_coinminer_dosia_glassworm_poet-rat_quasar-rat_remcos_snatch
- Size 10.7MB
- SHA256 162a75b3c7f0abff82cf8f07e27319ee4c934c8df71ec553fa1dfde97f0b6d22
- MD5 6f5cb7dbb9865ef622db25c3546e5cec
- SHA1 a7e0910a9406f1c911eb9c7b997ae4a8308c49d0
- SHA512 4f7867ac32e9391f58be894f78db2594e60a857d11845263c8adc5d34207a6de18fbe5ff4fa16b90cc24ad67a2d272032edb0ec30f8d324d5602a330fc38a92c
- SSDEEP 98304:iskqzCe3Hz1jKS4ZwjzROFdHFlVblKgKdPiz74s7rnChE:iA+sF68Ld2bii
- TLSH T111B6AE03FC5614E5D06E8675C6B39266BF713C440B6027D33B58B2246F7ABC4AEBA358
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Uses browser remote debugging
Can be used to control the browser and steal sensitive information such as credentials and session cookies.