xmrig | 4a152091b1eb086afe2f75849daf9d25b62722aa9dbf4e053fa3c7d2d98fe8be

General

Target
2026-09-01_508398b33289a6918fd32226ff205f38_cobalt-strike_coinminer_glassworm_poet-rat_quasar-rat_xmrig
Size 11.0MB
Sample260903-pc8ceswfne
SHA256 4a152091b1eb086afe2f75849daf9d25b62722aa9dbf4e053fa3c7d2d98fe8be
MD5 508398b33289a6918fd32226ff205f38
SHA1 5971445c34f2625d39a177c0e3637374b03a59dd
SHA512 e0ee4ba468f06595f1f7aebc347426f3dc2d2d1804c73d03a7aeae3cebf189cfa977fd5d110e090f0ca509512248e4a7d1235bc926e0075f5c37dbc8b2e2d321
SSDEEP 196608:m2XrSIqtPazmgL7uDbzV0xpZr8o37nmPQLi7gCsLTgKH:maWIPyquDCzzmPfgCDKH
TLSH
T1A5C68D27F4A300F9C67FD17086579772BA31746A42307BAB1F90EA752E12F906B2E714
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  2026-09-01_508398b33289a6918fd32226ff205f38_cobalt-strike_coinminer_glassworm_poet-rat_quasar-rat_xmrig
- Size 11.0MB
- SHA256 4a152091b1eb086afe2f75849daf9d25b62722aa9dbf4e053fa3c7d2d98fe8be
- MD5 508398b33289a6918fd32226ff205f38
- SHA1 5971445c34f2625d39a177c0e3637374b03a59dd
- SHA512 e0ee4ba468f06595f1f7aebc347426f3dc2d2d1804c73d03a7aeae3cebf189cfa977fd5d110e090f0ca509512248e4a7d1235bc926e0075f5c37dbc8b2e2d321
- SSDEEP 196608:m2XrSIqtPazmgL7uDbzV0xpZr8o37nmPQLi7gCsLTgKH:maWIPyquDCzzmPfgCDKH
- TLSH
  T1A5C68D27F4A300F9C67FD17086579772BA31746A42307BAB1F90EA752E12F906B2E714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

xmrig miner stealer defense_evasion spyware trojan
- Family: xmrig
  XMRig is a high performance, open source, cross platform CPU/GPU miner.
  miner xmrig
- Detects executables containing URLs to raw contents of a Github gist
- XMRig Miner payload
  miner
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
- Drops desktop.ini file(s)
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

2

T1112

Subvert Trust Controls

2

T1553

Install Root Certificate

2

T1553.004

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

1

T1102

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Family: xmrig

Detects executables containing URLs to raw contents of a Github gist

XMRig Miner payload

Contacts third-party web service commonly abused for C2

Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2