General
- Target 2026-08-14_5d28f083cb8095cd93baeb89ce49b8c2_cobalt-strike_coinminer_cryptbot_elex_glassworm_poet-rat_vidar
- Size 8.3MB
- Sample260814-ey7mxafb79
- SHA256 66cbf66e098bafda45034f378a2f29dbfa75f3d41de61786a89df12452bee5c3
- MD5 5d28f083cb8095cd93baeb89ce49b8c2
- SHA1 77c5ab57b5a67b29fd7093ccee43cf9368ab2a9c
- SHA512 1e2ae194c0238ec3f5b77a665beadc5e2503775ae00ba6797af3a20e1fe1acaf064526253bbdcae437e18ccf155458e37b8632df5ace7aedb9aba1d782a202b3
- SSDEEP 98304:y5n5n5n5n5n5n5n5n52/fh6ImzzJoDfuBcMv+A73XAM:y5n5n5n5n5n5n5n5n52Hh6ImzD+FM
- TLSH T1E8965C58FBEB11B1FA735A708876C2BB6E317D104730C7EFD640BA19AD229D09836716
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-14_5d28f083cb8095cd93baeb89ce49b8c2_cobalt-strike_coinminer_cryptbot_elex_glassworm_poet-rat_vidar.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-14_5d28f083cb8095cd93baeb89ce49b8c2_cobalt-strike_coinminer_cryptbot_elex_glassworm_poet-rat_vidar.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_5d28f083cb8095cd93baeb89ce49b8c2_cobalt-strike_coinminer_cryptbot_elex_glassworm_poet-rat_vidar
- Size 8.3MB
- SHA256 66cbf66e098bafda45034f378a2f29dbfa75f3d41de61786a89df12452bee5c3
- MD5 5d28f083cb8095cd93baeb89ce49b8c2
- SHA1 77c5ab57b5a67b29fd7093ccee43cf9368ab2a9c
- SHA512 1e2ae194c0238ec3f5b77a665beadc5e2503775ae00ba6797af3a20e1fe1acaf064526253bbdcae437e18ccf155458e37b8632df5ace7aedb9aba1d782a202b3
- SSDEEP 98304:y5n5n5n5n5n5n5n5n52/fh6ImzzJoDfuBcMv+A73XAM:y5n5n5n5n5n5n5n5n52Hh6ImzD+FM
- TLSH T1E8965C58FBEB11B1FA735A708876C2BB6E317D104730C7EFD640BA19AD229D09836716
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Creates new service(s)
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1System Services
1Service Execution
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1Scheduled Task
1