General
- Target 2026-08-24_7a71d88a10a2a3398771580c64d26d9c_cobalt-strike_coinminer_glassworm_poet-rat_quasar-rat_xmrig
- Size 10.7MB
- Sample260825-lvvbqszeke
- SHA256 927650a1ea14785e060969fff2d098c606ac503f8442d1a32d5b334543b775e2
- MD5 7a71d88a10a2a3398771580c64d26d9c
- SHA1 b668d5c15440444d08016d99f53b5a2ebca77993
- SHA512 16b7434d5c6a634845932518053070849863c145f4a1953f3ac10c8e96a5a89dc35a0b4e059b9fe631fe108d6f6d38da9e74e90ec06f47804836e07ffd1ba1f8
- SSDEEP 196608:NAfrMK0z50OJEzEuDTvnO5tQ3ovumrGXp66GLC:NYYKXS1uDaOZmry6S
- TLSH T108B67C27F5A304FDC67EE17082579732BA3178A942307BAB1B90DA752F12F906B2D714
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-24_7a71d88a10a2a3398771580c64d26d9c_cobalt-strike_coinminer_glassworm_poet-rat_quasar-rat_xmrig.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_7a71d88a10a2a3398771580c64d26d9c_cobalt-strike_coinminer_glassworm_poet-rat_quasar-rat_xmrig
- Size 10.7MB
- SHA256 927650a1ea14785e060969fff2d098c606ac503f8442d1a32d5b334543b775e2
- MD5 7a71d88a10a2a3398771580c64d26d9c
- SHA1 b668d5c15440444d08016d99f53b5a2ebca77993
- SHA512 16b7434d5c6a634845932518053070849863c145f4a1953f3ac10c8e96a5a89dc35a0b4e059b9fe631fe108d6f6d38da9e74e90ec06f47804836e07ffd1ba1f8
- SSDEEP 196608:NAfrMK0z50OJEzEuDTvnO5tQ3ovumrGXp66GLC:NYYKXS1uDaOZmry6S
- TLSH T108B67C27F5A304FDC67EE17082579732BA3178A942307BAB1B90DA752F12F906B2D714
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
UPX dump on OEP (original entry point)
-
XMRig Miner payload