General
- Target 2026-09-05_8362bf1feafd9b25199469f6611f1b05_cobalt-strike_coinminer_glassworm_poet-rat_quasar-rat_xmrig
- Size 10.5MB
- Sample260907-r79vvahe63
- SHA256 d6e3287ebd8f48d576ec9729fb70d1b755122c1007d8573d0f9335dcb14ddccf
- MD5 8362bf1feafd9b25199469f6611f1b05
- SHA1 36e6181ed3e03a44a6095e637f1af824b0e8e542
- SHA512 e84c669b1bb8549b6fe5a1e703813d23ddbd467fdc1956da6a530ef9591e0db9bfa6eb6b6c23d703ac8a59ba4c56f3aa3806c65a13fe7e8c3f9688d19739ef16
- SSDEEP 196608:u2XrSIqtPazmgL7uDbzVXUHXUXEOZmPOEDkfsLP:uaWIPyquDBZtmPfkfg
- TLSH T154B67C27F4E300F9C67FD17086579772BA31746A42307BAB1F90EA752E12F906A2E714
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-05_8362bf1feafd9b25199469f6611f1b05_cobalt-strike_coinminer_glassworm_poet-rat_quasar-rat_xmrig.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-05_8362bf1feafd9b25199469f6611f1b05_cobalt-strike_coinminer_glassworm_poet-rat_quasar-rat_xmrig
- Size 10.5MB
- SHA256 d6e3287ebd8f48d576ec9729fb70d1b755122c1007d8573d0f9335dcb14ddccf
- MD5 8362bf1feafd9b25199469f6611f1b05
- SHA1 36e6181ed3e03a44a6095e637f1af824b0e8e542
- SHA512 e84c669b1bb8549b6fe5a1e703813d23ddbd467fdc1956da6a530ef9591e0db9bfa6eb6b6c23d703ac8a59ba4c56f3aa3806c65a13fe7e8c3f9688d19739ef16
- SSDEEP 196608:u2XrSIqtPazmgL7uDbzVXUHXUXEOZmPOEDkfsLP:uaWIPyquDBZtmPfkfg
- TLSH T154B67C27F4E300F9C67FD17086579772BA31746A42307BAB1F90EA752E12F906A2E714
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
XMRig Miner payload
-
Drops desktop.ini file(s)