General
-
Target
2025-04-07_d0370b2d94fe5faf8d7dca9466b20075_cobalt-strike_poet-rat
-
Size
3.9MB
-
MD5
d0370b2d94fe5faf8d7dca9466b20075
-
SHA1
4d63ac64d692d2ccc6e90ca68c93b6a12c744470
-
SHA256
8015a762cb7ca48ff553d5d8275e294c91f2d143da3c490d8a592f60db64ee50
-
SHA512
00649caa653f3982f59f317a192d09f8c1943510c951004961c1c776a03ce1612c9b36133271bc6b1f4472f0b54fa99849335b0b53d186bed4e77ff3f791dd7c
-
SSDEEP
49152:oezaTF8FcNkNdfE0pZ9ozt4wIt56uL3pgrCEdMKPFotsgEBr6GjvzW+UBA3GdAOE:oemTLkNdfE0pZrt56utgpPFotBER//
Score
10/10
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
-
Xmrig family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2025-04-07_d0370b2d94fe5faf8d7dca9466b20075_cobalt-strike_poet-rat
Headers
Sections