General
-
Target
2025-04-07_d453f7f04e5c896fa37004b69c163f4c_cobalt-strike_poet-rat
-
Size
4.3MB
-
MD5
d453f7f04e5c896fa37004b69c163f4c
-
SHA1
6578c231e4214d55489b9659e2b2b379cfe8d3cb
-
SHA256
f6138bec5e4046483595eaee8e2ab8970d7a86f3b3b9eca20c73876d8d6c840f
-
SHA512
89dd5411d6da3a5567a8a1235486f8340349c42898df4909a18af3f5519f562b91e16ccba94b25f7673a2820dde3a72b75d7645712597586b0e7372ee94f12cb
-
SSDEEP
49152:oezaTF8FcNkNdfE0pZ9ozt4wIt56uL3pgrCEdMKPFotsgEBr6GjvzW+UBA3Gd7pw:oemTLkNdfE0pZrt56utgpPFotBER/mQp
Score
10/10
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
-
Xmrig family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2025-04-07_d453f7f04e5c896fa37004b69c163f4c_cobalt-strike_poet-rat
Headers
Sections