xmrig | 325bc6d2292c832485f29986f8a6d3822cf78bcae0448906a85bae76e78a5af6

General

Target
2026-08-25_cece2cabb0d08bf2c4c0fbe230d125e4_cobalt-strike_coinminer_glassworm_poet-rat_quasar-rat
Size 7.8MB
Sample260826-kglxrssths
SHA256 325bc6d2292c832485f29986f8a6d3822cf78bcae0448906a85bae76e78a5af6
MD5 cece2cabb0d08bf2c4c0fbe230d125e4
SHA1 792d8e012fbd36199b3482a06639311565c6facd
SHA512 9ac5307fbf70ffe03010413d4c3daa84f1fcac34c37d8a9b8107fe23f14b5bdcf19bcb95c4131bd50425a8cc7ea133e2f3213055cad2b61d94e248295a069a92
SSDEEP 196608:uFKcF3d1EdvMmdolW1uDZDtawLKAEmuR:ZcN16NoquDNn2mu
TLSH
T1FF864C2BF4B304F9C67EE07082969772BE71745A43317B971F94DA691B12FE06A2E310
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  2026-08-25_cece2cabb0d08bf2c4c0fbe230d125e4_cobalt-strike_coinminer_glassworm_poet-rat_quasar-rat
- Size 7.8MB
- SHA256 325bc6d2292c832485f29986f8a6d3822cf78bcae0448906a85bae76e78a5af6
- MD5 cece2cabb0d08bf2c4c0fbe230d125e4
- SHA1 792d8e012fbd36199b3482a06639311565c6facd
- SHA512 9ac5307fbf70ffe03010413d4c3daa84f1fcac34c37d8a9b8107fe23f14b5bdcf19bcb95c4131bd50425a8cc7ea133e2f3213055cad2b61d94e248295a069a92
- SSDEEP 196608:uFKcF3d1EdvMmdolW1uDZDtawLKAEmuR:ZcN16NoquDNn2mu
- TLSH
  T1FF864C2BF4B304F9C67EE07082969772BE71745A43317B971F94DA691B12FE06A2E310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

xmrig miner defense_evasion spyware stealer trojan
- Family: xmrig
  XMRig is a high performance, open source, cross platform CPU/GPU miner.
  miner xmrig
- Detects executables containing URLs to raw contents of a Github gist
- XMRig Miner payload
  miner
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
- Drops desktop.ini file(s)
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

2

T1112

Subvert Trust Controls

2

T1553

Install Root Certificate

2

T1553.004

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

1

T1102

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Family: xmrig

Detects executables containing URLs to raw contents of a Github gist

XMRig Miner payload

Contacts third-party web service commonly abused for C2

Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2