General
- Target 2026-09-04_211f4a1d6e48e0f23cea1dd1901cf965_cobalt-strike_coinminer_glassworm_poet-rat_quasar-rat
- Size 7.6MB
- Sample260905-t5ggmayclb
- SHA256 c7c8cd703ad1a892b0de7dad2acb6470adb2281900d708771a4959725bf8e7bc
- MD5 211f4a1d6e48e0f23cea1dd1901cf965
- SHA1 a247c001806992214e0a4e48bd948aa3c76cb09a
- SHA512 07213d3495f041d8752cb154e30c3097fea10d0a3808668a0e0192de1bbe8f6302697222b96f9e47e9e6c1c25da7c819de6ee07b1e5a66b967ce8336424e328b
- SSDEEP 196608:Rz+LQRw2oe9M8aoVouDhAggL5wH/m2BK:kERZLUzuDOv4m2
- TLSH T159864B17F8E304F9C67EE07086969772BA71749943317B971F90D6A52B12FE0AA3E310
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-04_211f4a1d6e48e0f23cea1dd1901cf965_cobalt-strike_coinminer_glassworm_poet-rat_quasar-rat.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_211f4a1d6e48e0f23cea1dd1901cf965_cobalt-strike_coinminer_glassworm_poet-rat_quasar-rat
- Size 7.6MB
- SHA256 c7c8cd703ad1a892b0de7dad2acb6470adb2281900d708771a4959725bf8e7bc
- MD5 211f4a1d6e48e0f23cea1dd1901cf965
- SHA1 a247c001806992214e0a4e48bd948aa3c76cb09a
- SHA512 07213d3495f041d8752cb154e30c3097fea10d0a3808668a0e0192de1bbe8f6302697222b96f9e47e9e6c1c25da7c819de6ee07b1e5a66b967ce8336424e328b
- SSDEEP 196608:Rz+LQRw2oe9M8aoVouDhAggL5wH/m2BK:kERZLUzuDOv4m2
- TLSH T159864B17F8E304F9C67EE07086969772BA71749943317B971F90D6A52B12FE0AA3E310
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
XMRig Miner payload