General

  • Target

    2025-04-07_c5a332cb6402c636e9bc617554cdcc64_cobalt-strike_poet-rat

  • Size

    5.3MB

  • Sample

    250407-nbpcgszmw8

  • MD5

    c5a332cb6402c636e9bc617554cdcc64

  • SHA1

    cc34beb6afcb79dca8762b921847b4b8c8d933a0

  • SHA256

    4d93720be948179f3ac9e7e7a8de82073eab5c4c165831e2d410064556181434

  • SHA512

    ed2ad0c1f42a9f1d71f76e510f7564824ae98f32bab33138f137108434454f23484ef84879eb7b70f09bd5921a5046381aea22cd7f704fd34ebe6a44917bd496

  • SSDEEP

    98304:oemTLkNdfE0pZrD56utgpPFotBER/mQ32N:T+q56utgpPF8u/I

Score
10/10

Malware Config

Targets

    • Target

      2025-04-07_c5a332cb6402c636e9bc617554cdcc64_cobalt-strike_poet-rat

    • Size

      5.3MB

    • MD5

      c5a332cb6402c636e9bc617554cdcc64

    • SHA1

      cc34beb6afcb79dca8762b921847b4b8c8d933a0

    • SHA256

      4d93720be948179f3ac9e7e7a8de82073eab5c4c165831e2d410064556181434

    • SHA512

      ed2ad0c1f42a9f1d71f76e510f7564824ae98f32bab33138f137108434454f23484ef84879eb7b70f09bd5921a5046381aea22cd7f704fd34ebe6a44917bd496

    • SSDEEP

      98304:oemTLkNdfE0pZrD56utgpPFotBER/mQ32N:T+q56utgpPF8u/I

    Score
    10/10
    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks