cobaltstrike | 404e1fad67f470fe245e1317b9f679ddf498b9b143d2710059d7a76ee917d28e | Triage

Submit
Reports

Overview

overview

Static

static

2025-03-21...at.exe

windows7-x64

2025-03-21...at.exe

windows10-2004-x64

Sharing

General

Target

2025-03-21_8d6122cb7d7d5b64776cb286e519d738_amadey_cobalt-strike_poet-rat
Size

5.9MB
Sample

250321-jwa85syqx2
MD5

8d6122cb7d7d5b64776cb286e519d738
SHA1

0c6ab551f033dc271756223644f6af2c1d10b43c
SHA256

404e1fad67f470fe245e1317b9f679ddf498b9b143d2710059d7a76ee917d28e
SHA512

3b9dcf4a5e29082965d2ca657c0fd4aefc614d995faddba1f1fc0a3ae6efba2fdd9dddfde598ade6787b69d5e823fe4cc3893aa9d73f1d1351ff2db208fbccab
SSDEEP

98304:oemTLkNdfE0pZrD56utgpPFotBER/mQ32lUD:T+q56utgpPF8u/7D

Score

10^/10

cobaltstrike xmrig backdoor miner trojan upx

Static task

static1

miner upx xmrig cobaltstrike

5 signatures

Behavioral task

behavioral1

Sample

2025-03-21_8d6122cb7d7d5b64776cb286e519d738_amadey_cobalt-strike_poet-rat.exe

Resource

win7-20241010-en

cobaltstrike xmrig backdoor miner trojan upx

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral2

Sample

2025-03-21_8d6122cb7d7d5b64776cb286e519d738_amadey_cobalt-strike_poet-rat.exe

Resource

win10v2004-20250314-en

cobaltstrike xmrig backdoor miner trojan upx

windows10-2004-x64

9 signatures

150 seconds

Malware Config

Targets

- Target
  
  2025-03-21_8d6122cb7d7d5b64776cb286e519d738_amadey_cobalt-strike_poet-rat
- Size
  
  5.9MB
- MD5
  
  8d6122cb7d7d5b64776cb286e519d738
- SHA1
  
  0c6ab551f033dc271756223644f6af2c1d10b43c
- SHA256
  
  404e1fad67f470fe245e1317b9f679ddf498b9b143d2710059d7a76ee917d28e
- SHA512
  
  3b9dcf4a5e29082965d2ca657c0fd4aefc614d995faddba1f1fc0a3ae6efba2fdd9dddfde598ade6787b69d5e823fe4cc3893aa9d73f1d1351ff2db208fbccab
- SSDEEP
  
  98304:oemTLkNdfE0pZrD56utgpPFotBER/mQ32lUD:T+q56utgpPF8u/7D
Score

10^/10

cobaltstrike xmrig backdoor miner trojan upx
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
- Cobaltstrike family
  cobaltstrike
- Xmrig family
  xmrig
- xmrig
  XMRig is a high performance, open source, cross platform CPU/GPU miner.
  miner xmrig
- XMRig Miner payload
  miner
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

minerupxxmrigcobaltstrike

behavioral1

cobaltstrikexmrigbackdoorminertrojanupx

behavioral2

cobaltstrikexmrigbackdoorminertrojanupx

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.