General

  • Target

    2025-04-07_5ca9c6cd5aef921fc846597b2c20c361_cobalt-strike_poet-rat

  • Size

    5.3MB

  • Sample

    250407-nazrtsxtds

  • MD5

    5ca9c6cd5aef921fc846597b2c20c361

  • SHA1

    ce7176cefee658a2920ba37a1a5ef247a0600e7e

  • SHA256

    a5d9c9926477548de131b8e2acd793903a6435c28f5a94caefbae6582c9a699b

  • SHA512

    d2e78ea72c08d6685d7a98de994243f0389677a03e16b10d336a3d6bc57d533405f9df27132cb7ad5bf93719c67251c5389843c7ce18b5a824739543196f8de4

  • SSDEEP

    98304:oemTLkNdfE0pZrD56utgpPFotBER/mQ32F:T+q56utgpPF8u/g

Score
10/10

Malware Config

Targets

    • Target

      2025-04-07_5ca9c6cd5aef921fc846597b2c20c361_cobalt-strike_poet-rat

    • Size

      5.3MB

    • MD5

      5ca9c6cd5aef921fc846597b2c20c361

    • SHA1

      ce7176cefee658a2920ba37a1a5ef247a0600e7e

    • SHA256

      a5d9c9926477548de131b8e2acd793903a6435c28f5a94caefbae6582c9a699b

    • SHA512

      d2e78ea72c08d6685d7a98de994243f0389677a03e16b10d336a3d6bc57d533405f9df27132cb7ad5bf93719c67251c5389843c7ce18b5a824739543196f8de4

    • SSDEEP

      98304:oemTLkNdfE0pZrD56utgpPFotBER/mQ32F:T+q56utgpPF8u/g

    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks