General
- Target 2026-08-24_5654c6dba2b2e2c3f30d772288160cb8_amadey_cobalt-strike_coinminer_glassworm_poet-rat_quasar-rat_xmrig
- Size 10.3MB
- Sample260825-qbcpssseqd
- SHA256 be3d3c0c582d1db13c086edcabadc89f1f7a0bae7f4a3a4620b1dd38099e9b5a
- MD5 5654c6dba2b2e2c3f30d772288160cb8
- SHA1 53d67664722669b5b25139de5d303150f09035e4
- SHA512 0504f48c8bd283c7ab711114a670a387e7db6622b34e4342ff9d8d6e8d53dda02a8b48a8d67052e5392b702c71c3ad049780ad0b2fef40571ce8db4408af1f2e
- SSDEEP 196608:NAfrMK0z50OJEzEuDTvnO5tQ3ovumrGXp667:NYYKXS1uDaOZmry6W
- TLSH T1C0B67C27F5A304FDC67EE17082579332BA3178A942307BAB1B94DA752F12F906B2D714
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-24_5654c6dba2b2e2c3f30d772288160cb8_amadey_cobalt-strike_coinminer_glassworm_poet-rat_quasar-rat_xmrig.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_5654c6dba2b2e2c3f30d772288160cb8_amadey_cobalt-strike_coinminer_glassworm_poet-rat_quasar-rat_xmrig
- Size 10.3MB
- SHA256 be3d3c0c582d1db13c086edcabadc89f1f7a0bae7f4a3a4620b1dd38099e9b5a
- MD5 5654c6dba2b2e2c3f30d772288160cb8
- SHA1 53d67664722669b5b25139de5d303150f09035e4
- SHA512 0504f48c8bd283c7ab711114a670a387e7db6622b34e4342ff9d8d6e8d53dda02a8b48a8d67052e5392b702c71c3ad049780ad0b2fef40571ce8db4408af1f2e
- SSDEEP 196608:NAfrMK0z50OJEzEuDTvnO5tQ3ovumrGXp667:NYYKXS1uDaOZmry6W
- TLSH T1C0B67C27F5A304FDC67EE17082579332BA3178A942307BAB1B94DA752F12F906B2D714
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
XMRig Miner payload
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.