General
- Target 2026-08-11_b198834c82f395e4fccaeb9d02fe4eb8_cobalt-strike_coinminer_cryptbot_elex_glassworm_poet-rat_vidar
- Size 7.7MB
- Sample260811-3vb9lavbjb
- SHA256 6bae0ee0ce3ffc2470847cb2864b8c1c3619abb04e8e8b1bff8b23faaa019140
- MD5 b198834c82f395e4fccaeb9d02fe4eb8
- SHA1 c9ddf2baaa81942ee16b92305cf5dec48e4a1326
- SHA512 7e41bf8a47d942b86acecfd40a60f237b874d9450288f05c6528da7d7a558080bd175ea3c10c914dc77d4d16a1c4ec402f4f7de5441c91d4bb98410ab5a2eeff
- SSDEEP 98304:j5d5d5d5d5d5d5d5d57/fh6ImzzJoDfuBcMv+A73XA5:j5d5d5d5d5d5d5d5d57Hh6ImzD+F5
- TLSH T1D5866C58FBCB54B1EA234570489BD2BF6E3075144321CBEFE600EB5AED17AD19C3A216
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-11_b198834c82f395e4fccaeb9d02fe4eb8_cobalt-strike_coinminer_cryptbot_elex_glassworm_poet-rat_vidar.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-11_b198834c82f395e4fccaeb9d02fe4eb8_cobalt-strike_coinminer_cryptbot_elex_glassworm_poet-rat_vidar.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-11_b198834c82f395e4fccaeb9d02fe4eb8_cobalt-strike_coinminer_cryptbot_elex_glassworm_poet-rat_vidar
- Size 7.7MB
- SHA256 6bae0ee0ce3ffc2470847cb2864b8c1c3619abb04e8e8b1bff8b23faaa019140
- MD5 b198834c82f395e4fccaeb9d02fe4eb8
- SHA1 c9ddf2baaa81942ee16b92305cf5dec48e4a1326
- SHA512 7e41bf8a47d942b86acecfd40a60f237b874d9450288f05c6528da7d7a558080bd175ea3c10c914dc77d4d16a1c4ec402f4f7de5441c91d4bb98410ab5a2eeff
- SSDEEP 98304:j5d5d5d5d5d5d5d5d57/fh6ImzzJoDfuBcMv+A73XA5:j5d5d5d5d5d5d5d5d57Hh6ImzD+F5
- TLSH T1D5866C58FBCB54B1EA234570489BD2BF6E3075144321CBEFE600EB5AED17AD19C3A216
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Creates new service(s)
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1System Services
1Service Execution
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1Scheduled Task
1