General

  • Target

    2025-04-04_f4a584c248a1ae1f22c2ceb8efa5b652_azorult_cobalt-strike_coinminer_poet-rat_xmrig

  • Size

    10.3MB

  • MD5

    f4a584c248a1ae1f22c2ceb8efa5b652

  • SHA1

    6167dfe15d7af2ec9f4de8fed1497615b88d2f7b

  • SHA256

    e8a3bf52677808f782f642b3348270f4febdc13681a5b7f14abc0f7a868f6928

  • SHA512

    b84df5e51444a291126bc73770f38529eecdc1d2459b8fdf52903001e13884b1e9caaefc3e75abe0f46524a73d01f869d6d8c375ae230e8cdc46ecab3183a874

  • SSDEEP

    196608:m2XrSIqtPazmgL7uDbzV0xpZr8o37nmPQLi7gCsLZ7:maWIPyquDCzzmPfgCq

Malware Config

Signatures

  • Privateloader family
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2025-04-04_f4a584c248a1ae1f22c2ceb8efa5b652_azorult_cobalt-strike_coinminer_poet-rat_xmrig
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections