General

  • Target

    2025-04-07_641961e0712991be21889e244bad0d23_cobalt-strike_poet-rat

  • Size

    5.3MB

  • Sample

    250407-nbhvpsxtfs

  • MD5

    641961e0712991be21889e244bad0d23

  • SHA1

    8ec67ea430ddb27dc6ab6e6902e830c21cde6597

  • SHA256

    e7e609381e516558c7d6323c3b475faa8156dc09ae2a3bfc08f8f222e989aa7c

  • SHA512

    307b6db5f970b14f7a61cce75e09060572c98903e7b4c9509e3c215da774d7b775c6ed2ab6ec9d58cf9d172d5e8c90a46bb89094111875b07645f03c8f134f67

  • SSDEEP

    98304:oemTLkNdfE0pZrD56utgpPFotBER/mQ329:T+q56utgpPF8u/g

Score
10/10

Malware Config

Targets

    • Target

      2025-04-07_641961e0712991be21889e244bad0d23_cobalt-strike_poet-rat

    • Size

      5.3MB

    • MD5

      641961e0712991be21889e244bad0d23

    • SHA1

      8ec67ea430ddb27dc6ab6e6902e830c21cde6597

    • SHA256

      e7e609381e516558c7d6323c3b475faa8156dc09ae2a3bfc08f8f222e989aa7c

    • SHA512

      307b6db5f970b14f7a61cce75e09060572c98903e7b4c9509e3c215da774d7b775c6ed2ab6ec9d58cf9d172d5e8c90a46bb89094111875b07645f03c8f134f67

    • SSDEEP

      98304:oemTLkNdfE0pZrD56utgpPFotBER/mQ329:T+q56utgpPF8u/g

    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks