General
- Target 2026-08-28_d6d348229d11df8cbd1df52b5cf51b9b_coinminer_elex_glassworm_hive_poet-rat_remcos_snatch
- Size 28.1MB
- Sample260828-jvrjqsvepf
- SHA256 daa213b28dfb62ed636d1fed8557fdf063b37389f5f0e8124d3c086c94f45724
- MD5 d6d348229d11df8cbd1df52b5cf51b9b
- SHA1 ea962c84b4adb464423dd5145ed24ef3d658f3dc
- SHA512 87e31b42ae0970f1ba04530b42823845a600aa5673be1dedc45613fef9a5a512ec150d99aa09bfc067e3e1ff922a10c6556c25a726914ff446a7fb0103e8c892
- SSDEEP 393216:E+DoJDkqaDV8G89DkqaDV8G8lLkdlWRjzxhrmebjPw5w5zKkP:FDrd4Rjzxhrme/PwO
- TLSH T1FB574A03B563D439C6520DB589BF4DAE2124AC41AE01D162FEACFD9BE3A2F3471D3169
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-28_d6d348229d11df8cbd1df52b5cf51b9b_coinminer_elex_glassworm_hive_poet-rat_remcos_snatch.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-28_d6d348229d11df8cbd1df52b5cf51b9b_coinminer_elex_glassworm_hive_poet-rat_remcos_snatch
- Size 28.1MB
- SHA256 daa213b28dfb62ed636d1fed8557fdf063b37389f5f0e8124d3c086c94f45724
- MD5 d6d348229d11df8cbd1df52b5cf51b9b
- SHA1 ea962c84b4adb464423dd5145ed24ef3d658f3dc
- SHA512 87e31b42ae0970f1ba04530b42823845a600aa5673be1dedc45613fef9a5a512ec150d99aa09bfc067e3e1ff922a10c6556c25a726914ff446a7fb0103e8c892
- SSDEEP 393216:E+DoJDkqaDV8G89DkqaDV8G8lLkdlWRjzxhrmebjPw5w5zKkP:FDrd4Rjzxhrme/PwO
- TLSH T1FB574A03B563D439C6520DB589BF4DAE2124AC41AE01D162FEACFD9BE3A2F3471D3169
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables containing possible sandbox analysis VM usernames
-
UPX dump on OEP (original entry point)