Overview

overview

10

Static

static

10

2025-04-07...at.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-04-07_641961e0712991be21889e244bad0d23_cobalt-strike_poet-rat

  • Size

    5.3MB

  • MD5

    641961e0712991be21889e244bad0d23

  • SHA1

    8ec67ea430ddb27dc6ab6e6902e830c21cde6597

  • SHA256

    e7e609381e516558c7d6323c3b475faa8156dc09ae2a3bfc08f8f222e989aa7c

  • SHA512

    307b6db5f970b14f7a61cce75e09060572c98903e7b4c9509e3c215da774d7b775c6ed2ab6ec9d58cf9d172d5e8c90a46bb89094111875b07645f03c8f134f67

  • SSDEEP

    98304:oemTLkNdfE0pZrD56utgpPFotBER/mQ329:T+q56utgpPF8u/g

Score
10/10
minerupxxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2025-04-07_641961e0712991be21889e244bad0d23_cobalt-strike_poet-rat
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections