General
- Target 2026-08-23_6b55e241580bbe96c9a4ecc7259ebad0_amadey_cobalt-strike_coinminer_glassworm_poet-rat_quasar-rat_redline-stealer_rhadamanthys_rokrat_smoke-loader_stop_valleyrat
- Size 7.7MB
- Sample260824-llc14a1vct
- SHA256 3fa5822a5d86ca0ecc007eb82a2d886c9999d5ddf18eda4858125a14ce8f5446
- MD5 6b55e241580bbe96c9a4ecc7259ebad0
- SHA1 3700b0fa2853da6c7cdd965857648748259a39bf
- SHA512 909048bbddcf9fd5d80ec4056dd4e40d03ea4e148f1f99dd9d83c8dca187b7ec1ccff9c59c667902f1692be4ae664d20374b049cf6dce1d79ae80a9b6f5a78f4
- SSDEEP 98304:HGUjSb/X0Z3y/t2uDN8nsk/39999999999eEN3JjAUtw6MT4nR8CZqXebhnp3aJb:HGUGb/X0Zi/t2uDN8qurYmd08uXV
- TLSH T153866D17F8A304F9C67EE03086769732BA75785943313BA71F90DA691A16FD07BAE310
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-23_6b55e241580bbe96c9a4ecc7259ebad0_amadey_cobalt-strike_coinminer_glassworm_poet-rat_quasar.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_6b55e241580bbe96c9a4ecc7259ebad0_amadey_cobalt-strike_coinminer_glassworm_poet-rat_quasar-rat_redline-stealer_rhadamanthys_rokrat_smoke-loader_stop_valleyrat
- Size 7.7MB
- SHA256 3fa5822a5d86ca0ecc007eb82a2d886c9999d5ddf18eda4858125a14ce8f5446
- MD5 6b55e241580bbe96c9a4ecc7259ebad0
- SHA1 3700b0fa2853da6c7cdd965857648748259a39bf
- SHA512 909048bbddcf9fd5d80ec4056dd4e40d03ea4e148f1f99dd9d83c8dca187b7ec1ccff9c59c667902f1692be4ae664d20374b049cf6dce1d79ae80a9b6f5a78f4
- SSDEEP 98304:HGUjSb/X0Z3y/t2uDN8nsk/39999999999eEN3JjAUtw6MT4nR8CZqXebhnp3aJb:HGUGb/X0Zi/t2uDN8qurYmd08uXV
- TLSH T153866D17F8A304F9C67EE03086769732BA75785943313BA71F90DA691A16FD07BAE310
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
XMRig Miner payload