General
- Target 2026-08-21_6a1d421649050777dd1a3c2466fe03ef_cobalt-strike_coinminer_glassworm_hive_poet-rat_quasar-rat_snatch_zxxz
- Size 20.3MB
- Sample260821-e25ygsgm3x
- SHA256 7aec79d4d03ad38d4d3890c9d6e7cbcb3c1a96c2cba64f1d80d0b5653000bb2b
- MD5 6a1d421649050777dd1a3c2466fe03ef
- SHA1 150b3805f4f9b7f1f29f33930834f8473cee277f
- SHA512 938690c5d33c0d84e4411647cc4610e8179f4fdf1f3cd67efdfc2778359ca5bf4613a26653c3db943916c9e97f9d62d933b10f17ba2124d7a15a871270280880
- SSDEEP 196608:G815BqSciTocYo6DtYwr/xU3rDXWMc85j4eEsoCSCwG:JsWv6DZc7c85j4euNCb
- TLSH T122275B17F4A304E9C67ED130865AA733BA71745943307FA72B64C6792E22FE06A3E714
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-21_6a1d421649050777dd1a3c2466fe03ef_cobalt-strike_coinminer_glassworm_hive_poet-rat_quasar-rat_snatch_zxxz.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_6a1d421649050777dd1a3c2466fe03ef_cobalt-strike_coinminer_glassworm_hive_poet-rat_quasar-rat_snatch_zxxz
- Size 20.3MB
- SHA256 7aec79d4d03ad38d4d3890c9d6e7cbcb3c1a96c2cba64f1d80d0b5653000bb2b
- MD5 6a1d421649050777dd1a3c2466fe03ef
- SHA1 150b3805f4f9b7f1f29f33930834f8473cee277f
- SHA512 938690c5d33c0d84e4411647cc4610e8179f4fdf1f3cd67efdfc2778359ca5bf4613a26653c3db943916c9e97f9d62d933b10f17ba2124d7a15a871270280880
- SSDEEP 196608:G815BqSciTocYo6DtYwr/xU3rDXWMc85j4eEsoCSCwG:JsWv6DZc7c85j4euNCb
- TLSH T122275B17F4A304E9C67ED130865AA733BA71745943307FA72B64C6792E22FE06A3E714
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
XMRig Miner payload