xmrig | 1484992c4ec52ef40a39e713107ef92e72862144961c4ece4cc7f6f4017b7d35

General

Target
2026-08-23_da79bfc630fcf0c5dc891910250a6615_cobalt-strike_coinminer_glassworm_poet-rat_quasar-rat
Size 7.8MB
Sample260823-xmmsgayhph
SHA256 1484992c4ec52ef40a39e713107ef92e72862144961c4ece4cc7f6f4017b7d35
MD5 da79bfc630fcf0c5dc891910250a6615
SHA1 19ec0554f3225b415473862a90f4d333202da5f5
SHA512 497bdf67c0103fd1b92660069a6549f24180e64db01d80c649b7159fff61c03e58d4c39146e5c8e16ef2ee688fae0bb5fe93e98c6380bd3d1ab2a4e2b8b16ef6
SSDEEP 196608:OFKcF3d1EdvMmdolW1uDZDtawHK0omuh:5cN16NoquDNT+mu
TLSH
T12A864C2BF4B304F9C67EE07082969772BE71745A43317B971F94DA691B12FE06A2E310
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  2026-08-23_da79bfc630fcf0c5dc891910250a6615_cobalt-strike_coinminer_glassworm_poet-rat_quasar-rat
- Size 7.8MB
- SHA256 1484992c4ec52ef40a39e713107ef92e72862144961c4ece4cc7f6f4017b7d35
- MD5 da79bfc630fcf0c5dc891910250a6615
- SHA1 19ec0554f3225b415473862a90f4d333202da5f5
- SHA512 497bdf67c0103fd1b92660069a6549f24180e64db01d80c649b7159fff61c03e58d4c39146e5c8e16ef2ee688fae0bb5fe93e98c6380bd3d1ab2a4e2b8b16ef6
- SSDEEP 196608:OFKcF3d1EdvMmdolW1uDZDtawHK0omuh:5cN16NoquDNT+mu
- TLSH
  T12A864C2BF4B304F9C67EE07082969772BE71745A43317B971F94DA691B12FE06A2E310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

xmrig miner defense_evasion spyware stealer trojan
- Family: xmrig
  XMRig is a high performance, open source, cross platform CPU/GPU miner.
  miner xmrig
- Detects executables containing URLs to raw contents of a Github gist
- XMRig Miner payload
  miner
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
- Drops desktop.ini file(s)
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

2

T1112

Subvert Trust Controls

2

T1553

Install Root Certificate

2

T1553.004

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

1

T1102

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Family: xmrig

Detects executables containing URLs to raw contents of a Github gist

XMRig Miner payload

Contacts third-party web service commonly abused for C2

Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2