Overview

overview

10

Static

static

10

2025-04-07...at.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-04-07_c5a332cb6402c636e9bc617554cdcc64_cobalt-strike_poet-rat

  • Size

    5.3MB

  • MD5

    c5a332cb6402c636e9bc617554cdcc64

  • SHA1

    cc34beb6afcb79dca8762b921847b4b8c8d933a0

  • SHA256

    4d93720be948179f3ac9e7e7a8de82073eab5c4c165831e2d410064556181434

  • SHA512

    ed2ad0c1f42a9f1d71f76e510f7564824ae98f32bab33138f137108434454f23484ef84879eb7b70f09bd5921a5046381aea22cd7f704fd34ebe6a44917bd496

  • SSDEEP

    98304:oemTLkNdfE0pZrD56utgpPFotBER/mQ32N:T+q56utgpPF8u/I

Score
10/10
minerupxxmrig

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2025-04-07_c5a332cb6402c636e9bc617554cdcc64_cobalt-strike_poet-rat
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections