2026-08-23_679b771783ad3bae0c1c25a3584cc80d_cobalt-strike_coinminer_cryptbot_glassworm_poet-rat_vidar

General

Target
2026-08-23_679b771783ad3bae0c1c25a3584cc80d_cobalt-strike_coinminer_cryptbot_glassworm_poet-rat_vidar
Size 4.5MB
Sample260824-lya29seq2x
SHA256 602fc5b79412eba086870bf194030c03d3294ae2c9d932fed00a9bebde2fc87d
MD5 679b771783ad3bae0c1c25a3584cc80d
SHA1 852c31a037f0998b584f073c3f8a315cbde00d63
SHA512 d4f350fc2c005d611db2fce94e9731f685f46a0621a5e333bc5e96f0b712b2c9357406c2ba5c34236b8d60404649f230a52148db3ac0050d444ba12f94312dfa
SSDEEP 49152:9rhOL+EzrPKKfHPZ6IVMv76K8ocsCGzzJ7UDv7zuBcLAqw1Gjg+A2deCMmwV/vJj:RUP/fh6ImzzJoDfuBcMv+A73XAU
TLSH
T1F6267C40FADB94F5EA03463045A7A37F6331B5098335CBC7C6809FAAE957AD21A33716
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-23_679b771783ad3bae0c1c25a3584cc80d_cobalt-strike_coinminer_cryptbot_glassworm_poet-rat_vidar

File Explorer

2026-08-23_679b771783ad3bae0c1c25a3584cc80d_cobalt-strike_coinminer_cryptbot_glassworm_poet-rat_vidar

.exe 4.5MB

2026-08-23_679b771783ad3bae0c1c25a3584cc80d_cobalt-strike_coinminer_cryptbot_glassworm_poet-rat_vidar

SHA256 602fc5b79412eba086870bf194030c03d3294ae2c9d932fed00a9bebde2fc87d
MD5 679b771783ad3bae0c1c25a3584cc80d
SHA1 852c31a037f0998b584f073c3f8a315cbde00d63
SHA512 d4f350fc2c005d611db2fce94e9731f685f46a0621a5e333bc5e96f0b712b2c9357406c2ba5c34236b8d60404649f230a52148db3ac0050d444ba12f94312dfa
SSDEEP 49152:9rhOL+EzrPKKfHPZ6IVMv76K8ocsCGzzJ7UDv7zuBcLAqw1Gjg+A2deCMmwV/vJj:RUP/fh6ImzzJoDfuBcMv+A73XAU
TLSH
T1F6267C40FADB94F5EA03463045A7A37F6331B5098335CBC7C6809FAAE957AD21A33716
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

10

Entry point

574608

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP IMAGE_FILE_NET_RUN_FROM_SWAP

PDB paths

Name

.text

Size

566KB

Virtual Size

565KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

162KB

Virtual Size

162KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

15KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.boxload

Size

512B

Virtual Size

4B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

9.6MB

Virtual Size

9.6MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-23_679b771783ad3bae0c1c25a3584cc80d_cobalt-strike_coinminer_cryptbot_glassworm_poet-rat_vidar

generic