General
- Target 2026-09-04_5dc10aa8f7b7cfbcb91f057925bce7f4_amadey_cobalt-strike_coinminer_glassworm_poet-rat_quasar-rat_xmrig
- Size 13.4MB
- Sample260905-lj1dls1fqd
- SHA256 e2e6c8cd3abe49b6dbf998f8f769cec03a1ce55ffcbe94494c2b101a55ca8f00
- MD5 5dc10aa8f7b7cfbcb91f057925bce7f4
- SHA1 59469b897caa08f14afb1a8b00401d3e25167788
- SHA512 981d2571b1ee6b0c07065372085c94926476de34bd2f2b515d7ec958072f7bc6cdb9c7e416a84667c6c7c7d484e27b14e9e5c29169ab21d3b6169b582ad6067b
- SSDEEP 196608:EAfrMK0z50OJEzEuDTvnO5tQ3ovumrGXp66u:EYYKXS1uDaOZmry6Z
- TLSH T1E1E67C27F5A304F9C67FE17082579332BA3178A942307BAB1B94DA752F12F906B2D714
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-04_5dc10aa8f7b7cfbcb91f057925bce7f4_amadey_cobalt-strike_coinminer_glassworm_poet-rat_quasar-rat_xmrig.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_5dc10aa8f7b7cfbcb91f057925bce7f4_amadey_cobalt-strike_coinminer_glassworm_poet-rat_quasar-rat_xmrig
- Size 13.4MB
- SHA256 e2e6c8cd3abe49b6dbf998f8f769cec03a1ce55ffcbe94494c2b101a55ca8f00
- MD5 5dc10aa8f7b7cfbcb91f057925bce7f4
- SHA1 59469b897caa08f14afb1a8b00401d3e25167788
- SHA512 981d2571b1ee6b0c07065372085c94926476de34bd2f2b515d7ec958072f7bc6cdb9c7e416a84667c6c7c7d484e27b14e9e5c29169ab21d3b6169b582ad6067b
- SSDEEP 196608:EAfrMK0z50OJEzEuDTvnO5tQ3ovumrGXp66u:EYYKXS1uDaOZmry6Z
- TLSH T1E1E67C27F5A304F9C67FE17082579332BA3178A942307BAB1B94DA752F12F906B2D714
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
UPX dump on OEP (original entry point)
-
XMRig Miner payload