General
- Target 2026-08-10_d98aeb7b588d98a23e457c46554e6a36_cobalt-strike_coinminer_cryptbot_elex_glassworm_poet-rat_vidar
- Size 9.9MB
- Sample260810-b9yycsde25
- SHA256 45722b78ba056d6a6555226d54bac6ab0fc04982cbaf737329e0723e4de1089f
- MD5 d98aeb7b588d98a23e457c46554e6a36
- SHA1 ccf93067420b3144f1e491106c782152250a7a89
- SHA512 216da9d388fe109a98c60c2a190c9c77988147ef32a34d055e72c6fc9a349537181d934ca87ca04c94b28e56133cb982ae306fdc1a8df7a13d651c25770e5210
- SSDEEP 49152:U+EF+Ei+EF+Ei+EF+Efiw2I+EF+Ei+EF+Ei+EF+Efiw2I+EF+Ei+EF+Ei+EF+Efw:J/fh6ImzzJoDfuBcMv+A73XA7
- TLSH T1B8A66B05FADB44B0E927617048E7D37F8A31B9118732CBDBE6448B2AAD23BE15C35716
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_d98aeb7b588d98a23e457c46554e6a36_cobalt-strike_coinminer_cryptbot_elex_glassworm_poet-rat_vidar.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_d98aeb7b588d98a23e457c46554e6a36_cobalt-strike_coinminer_cryptbot_elex_glassworm_poet-rat_vidar.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_d98aeb7b588d98a23e457c46554e6a36_cobalt-strike_coinminer_cryptbot_elex_glassworm_poet-rat_vidar
- Size 9.9MB
- SHA256 45722b78ba056d6a6555226d54bac6ab0fc04982cbaf737329e0723e4de1089f
- MD5 d98aeb7b588d98a23e457c46554e6a36
- SHA1 ccf93067420b3144f1e491106c782152250a7a89
- SHA512 216da9d388fe109a98c60c2a190c9c77988147ef32a34d055e72c6fc9a349537181d934ca87ca04c94b28e56133cb982ae306fdc1a8df7a13d651c25770e5210
- SSDEEP 49152:U+EF+Ei+EF+Ei+EF+Efiw2I+EF+Ei+EF+Ei+EF+Efiw2I+EF+Ei+EF+Ei+EF+Efw:J/fh6ImzzJoDfuBcMv+A73XA7
- TLSH T1B8A66B05FADB44B0E927617048E7D37F8A31B9118732CBDBE6448B2AAD23BE15C35716
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Creates new service(s)
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1System Services
1Service Execution
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1Scheduled Task
1