General
-
Target
2025-03-28_98260699709b108a541be854e33089f7_amadey_cobalt-strike_poet-rat_smoke-loader
-
Size
5.9MB
-
MD5
98260699709b108a541be854e33089f7
-
SHA1
30d9b00d32cac00eedd3498651b56cafdcdd9c1e
-
SHA256
49f1655acd9b9b735d275316816ee77e9e59f01b523588999a9c306c93e08162
-
SHA512
c3703c47e3648767c726fc8eadd5ba1b04329703355c94816572e54263374411b899e7804b6bbd883783ad97ce52d6d8dc0c7e193a78c4d5a35ab9a333bed0f5
-
SSDEEP
98304:oemTLkNdfE0pZrD56utgpPFotBER/mQ32lUP:T+q56utgpPF8u/7P
Score
10/10
Malware Config
Signatures
-
Cobaltstrike family
-
XMRig Miner payload 1 IoCs
-
Xmrig family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2025-03-28_98260699709b108a541be854e33089f7_amadey_cobalt-strike_poet-rat_smoke-loader
Headers
Sections