General
- Target 2026-09-06_d4aa487feeb2a67c6c8f22cefbc6bb6e_cobalt-strike_coinminer_glassworm_poet-rat_quasar-rat
- Size 7.7MB
- Sample260906-vnhh2aydmd
- SHA256 d7c685c9a576e1847400b53f6292add915020518a9cf6e41dc1bd4346a232ffe
- MD5 d4aa487feeb2a67c6c8f22cefbc6bb6e
- SHA1 387977b38ee97382812741d62ad14bd901bf2aa1
- SHA512 9e026d465e9f1504b0cc248998d9a9932a8acbae1d67f08a98f92c8ff6004894a7039c6f8b1575dd61e47f079a98f66c9927788897d213c5e5fc7de847c26d7e
- SSDEEP 98304:HGUjSb/X0Z3y/t2uDN8nsk/39999999999eEN3JjAUtw6MT4nR8CZqXebhnp3aJb:HGUGb/X0Zi/t2uDN8qurYmd08uP5
- TLSH T1C2867D17F8A304F9C67EE03086769732BA75746943313BA71F90DA691B16FE07A6E310
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-06_d4aa487feeb2a67c6c8f22cefbc6bb6e_cobalt-strike_coinminer_glassworm_poet-rat_quasar-rat.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-06_d4aa487feeb2a67c6c8f22cefbc6bb6e_cobalt-strike_coinminer_glassworm_poet-rat_quasar-rat
- Size 7.7MB
- SHA256 d7c685c9a576e1847400b53f6292add915020518a9cf6e41dc1bd4346a232ffe
- MD5 d4aa487feeb2a67c6c8f22cefbc6bb6e
- SHA1 387977b38ee97382812741d62ad14bd901bf2aa1
- SHA512 9e026d465e9f1504b0cc248998d9a9932a8acbae1d67f08a98f92c8ff6004894a7039c6f8b1575dd61e47f079a98f66c9927788897d213c5e5fc7de847c26d7e
- SSDEEP 98304:HGUjSb/X0Z3y/t2uDN8nsk/39999999999eEN3JjAUtw6MT4nR8CZqXebhnp3aJb:HGUGb/X0Zi/t2uDN8qurYmd08uP5
- TLSH T1C2867D17F8A304F9C67EE03086769732BA75746943313BA71F90DA691B16FE07A6E310
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
XMRig Miner payload