General
- Target 2026-09-04_4d8ce7e1b4a689fb02ba3b60edf64cde_cobalt-strike_coinminer_glassworm_poet-rat_vidar
- Size 5.6MB
- Sample260905-ng8nbabl5t
- SHA256 5c36246a935b232fb4d83c75a6897179dfadc83ff98c24fe59998b0db8cbe7c1
- MD5 4d8ce7e1b4a689fb02ba3b60edf64cde
- SHA1 77473c093552a07a0b9b74776267ebc33319bb39
- SHA512 5babb4a48f3c07a3b62f6f05c8c99f8417e4592b3ea7a04e041cfd4ee0dc39abe492c0e43adac4bd329dd6878f8b3e37893735a35e3d866b2a9642dd9a987bc1
- SSDEEP 98304:demTLkNdfE0pZqw56utgpPFotBER/mQ32e:E+856utgpPF8u/h
- TLSH T108566C41FDAB05F2EB871230CCB7465FA33172190335EAC3DA640A67EA276E46B36751
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-04_4d8ce7e1b4a689fb02ba3b60edf64cde_cobalt-strike_coinminer_glassworm_poet-rat_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_4d8ce7e1b4a689fb02ba3b60edf64cde_cobalt-strike_coinminer_glassworm_poet-rat_vidar
- Size 5.6MB
- SHA256 5c36246a935b232fb4d83c75a6897179dfadc83ff98c24fe59998b0db8cbe7c1
- MD5 4d8ce7e1b4a689fb02ba3b60edf64cde
- SHA1 77473c093552a07a0b9b74776267ebc33319bb39
- SHA512 5babb4a48f3c07a3b62f6f05c8c99f8417e4592b3ea7a04e041cfd4ee0dc39abe492c0e43adac4bd329dd6878f8b3e37893735a35e3d866b2a9642dd9a987bc1
- SSDEEP 98304:demTLkNdfE0pZqw56utgpPFotBER/mQ32e:E+856utgpPF8u/h
- TLSH T108566C41FDAB05F2EB871230CCB7465FA33172190335EAC3DA640A67EA276E46B36751
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
XMRig Miner payload
-
Executes dropped EXE