General
-
Target
2025-04-07_641961e0712991be21889e244bad0d23_cobalt-strike_poet-rat
-
Size
5.3MB
-
Sample
250407-nbhvpsxtfs
-
MD5
641961e0712991be21889e244bad0d23
-
SHA1
8ec67ea430ddb27dc6ab6e6902e830c21cde6597
-
SHA256
e7e609381e516558c7d6323c3b475faa8156dc09ae2a3bfc08f8f222e989aa7c
-
SHA512
307b6db5f970b14f7a61cce75e09060572c98903e7b4c9509e3c215da774d7b775c6ed2ab6ec9d58cf9d172d5e8c90a46bb89094111875b07645f03c8f134f67
-
SSDEEP
98304:oemTLkNdfE0pZrD56utgpPFotBER/mQ329:T+q56utgpPF8u/g
Malware Config
Targets
-
-
Target
2025-04-07_641961e0712991be21889e244bad0d23_cobalt-strike_poet-rat
-
Size
5.3MB
-
MD5
641961e0712991be21889e244bad0d23
-
SHA1
8ec67ea430ddb27dc6ab6e6902e830c21cde6597
-
SHA256
e7e609381e516558c7d6323c3b475faa8156dc09ae2a3bfc08f8f222e989aa7c
-
SHA512
307b6db5f970b14f7a61cce75e09060572c98903e7b4c9509e3c215da774d7b775c6ed2ab6ec9d58cf9d172d5e8c90a46bb89094111875b07645f03c8f134f67
-
SSDEEP
98304:oemTLkNdfE0pZrD56utgpPFotBER/mQ329:T+q56utgpPF8u/g
-
Xmrig family
-
XMRig Miner payload
-
Executes dropped EXE
-