2026-07-15_2f8704a4adb2a5fb293a4abb169c6510_cobalt-strike_coinminer_elex_glassworm_poet-rat

General

Target
2026-07-15_2f8704a4adb2a5fb293a4abb169c6510_cobalt-strike_coinminer_elex_glassworm_poet-rat
Size 2.8MB
Sample260715-ftzbeae15x
SHA256 5c17742b5967f5d4c7efd604eec2985cee5c5578783c153d03acaa2cc772e816
MD5 2f8704a4adb2a5fb293a4abb169c6510
SHA1 5e4de8c3e6ad81c03ea3885b51ba8c7a0ccb9856
SHA512 7486936ceb74a74a81595a93cc2cdfe4effcca2560e2b1527b19f8d1955c0e9e023d6a2ffd7b2fc5acbf5f55be18828d10fefbe296c9b0c686150054d499e8b1
SSDEEP 49152:AltOGE0+vuSviKnSUqRoGlqDWWUH7f1s5zmp7Yh3KCgxoZM2ZAWPEEr8WxW:itOn0guG
TLSH
T1EED517C1F9DB41F5D1478EB288B6922FAB30060883B0CEC7DF682E59ED5B6D4057B625
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-15_2f8704a4adb2a5fb293a4abb169c6510_cobalt-strike_coinminer_elex_glassworm_poet-rat

2026-07-15_2f8704a4adb2a5fb293a4abb169c6510_cobalt-strike_coinminer_elex_glassworm_poet-rat

.exe 2.8MB

IMPHASH e724bea03515dde29f2b2b282d64f822
SHA256 5c17742b5967f5d4c7efd604eec2985cee5c5578783c153d03acaa2cc772e816
MD5 2f8704a4adb2a5fb293a4abb169c6510
SHA1 5e4de8c3e6ad81c03ea3885b51ba8c7a0ccb9856
SHA512 7486936ceb74a74a81595a93cc2cdfe4effcca2560e2b1527b19f8d1955c0e9e023d6a2ffd7b2fc5acbf5f55be18828d10fefbe296c9b0c686150054d499e8b1
SSDEEP 49152:AltOGE0+vuSviKnSUqRoGlqDWWUH7f1s5zmp7Yh3KCgxoZM2ZAWPEEr8WxW:itOn0guG
TLSH
T1EED517C1F9DB41F5D1478EB288B6922FAB30060883B0CEC7DF682E59ED5B6D4057B625
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

342640

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths