Overview

overview

10

Static

static

10

2025-03-30...er.exe

windows7-x64

10

2025-03-30...er.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-03-30_1eadd8aa4c2d26e1c1e9b16320094e7c_amadey_cobalt-strike_poet-rat_smoke-loader

  • Size

    5.9MB

  • MD5

    1eadd8aa4c2d26e1c1e9b16320094e7c

  • SHA1

    d6e101701b0d90ceceb3384a2629443643eef7eb

  • SHA256

    661fb8bee06962e4472c2065df334916b133d260e583f3b1de37abc5a7eb829c

  • SHA512

    4105721bc47e186db7261cc26fe01590683b91922ad1aeaf70aa383e6befc7d339f61c120d6171b5411b95a3328480592b76d9ed2aef43fdd269a79a199a2516

  • SSDEEP

    98304:oemTLkNdfE0pZrD56utgpPFotBER/mQ32lUk:T+q56utgpPF8u/7k

Score
10/10
minerupxxmrigcobaltstrike

Malware Config

Signatures

  • Cobaltstrike family
    cobaltstrike
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2025-03-30_1eadd8aa4c2d26e1c1e9b16320094e7c_amadey_cobalt-strike_poet-rat_smoke-loader
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections