General
- Target 2026-09-04_57a7afe62cf8f929c4198e750d242979_cobalt-strike_coinminer_glassworm_poet-rat_quasar-rat
- Size 9.2MB
- Sample260905-maa8ssyyhw
- SHA256 54731f3106f2657d044c07a6c6e2bbec94edd20bc6ea543c96caf60b0b563d81
- MD5 57a7afe62cf8f929c4198e750d242979
- SHA1 0f3fbc63cc1e13cc959e2beba19edddc6f2c1df8
- SHA512 3e4ac823540b4bb491066016b7f12e26b00d2a05ff0cb4d9956a84298a8f4b4e8bea00387bef059b3390fb15dd834780a03f01bd563f3f18d441ae49d99436cd
- SSDEEP 196608:z8GsKLT2tkJe1SaGhuDrxevMcnWm6gafmhRr:h7LC4jfuDtR7m6SRr
- TLSH T17CA67D27F8B204F9C67EE13082569732BE71786A43357B971F90D6651B12FE0AB2E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-04_57a7afe62cf8f929c4198e750d242979_cobalt-strike_coinminer_glassworm_poet-rat_quasar-rat.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_57a7afe62cf8f929c4198e750d242979_cobalt-strike_coinminer_glassworm_poet-rat_quasar-rat
- Size 9.2MB
- SHA256 54731f3106f2657d044c07a6c6e2bbec94edd20bc6ea543c96caf60b0b563d81
- MD5 57a7afe62cf8f929c4198e750d242979
- SHA1 0f3fbc63cc1e13cc959e2beba19edddc6f2c1df8
- SHA512 3e4ac823540b4bb491066016b7f12e26b00d2a05ff0cb4d9956a84298a8f4b4e8bea00387bef059b3390fb15dd834780a03f01bd563f3f18d441ae49d99436cd
- SSDEEP 196608:z8GsKLT2tkJe1SaGhuDrxevMcnWm6gafmhRr:h7LC4jfuDtR7m6SRr
- TLSH T17CA67D27F8B204F9C67EE13082569732BE71786A43357B971F90D6651B12FE0AB2E710
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
XMRig Miner payload