General
- Target 2026-09-05_7443a73c6ee3e213c3636f1bffc5d783_cobalt-strike_coinminer_glassworm_poet-rat_vidar
- Size 5.0MB
- Sample260907-vy2pnadm51
- SHA256 6abf8350d334edc0a89a617ce76cbb645b7a4d0c1a2002ab0d70abe4059667ce
- MD5 7443a73c6ee3e213c3636f1bffc5d783
- SHA1 691d0859ced7909d01b50fd8a69bfcb64b682f69
- SHA512 d9585a55c8fbeb6ee10c340825937196d7481ce60fb9b4567df245c8a1855eb5d44c2bad491deed13500da783aecaeff4933b708e191def70e7fd86a09a4aa02
- SSDEEP 98304:BemTLkNdfE0pZrw56utgpPFotBER/mQ327:Q+p56utgpPF8u/S
- TLSH T130367B91FDEB00F2E64B1630CCA7576FA731770A0335D6C7EA600F56EA276E16A32611
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-05_7443a73c6ee3e213c3636f1bffc5d783_cobalt-strike_coinminer_glassworm_poet-rat_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-05_7443a73c6ee3e213c3636f1bffc5d783_cobalt-strike_coinminer_glassworm_poet-rat_vidar
- Size 5.0MB
- SHA256 6abf8350d334edc0a89a617ce76cbb645b7a4d0c1a2002ab0d70abe4059667ce
- MD5 7443a73c6ee3e213c3636f1bffc5d783
- SHA1 691d0859ced7909d01b50fd8a69bfcb64b682f69
- SHA512 d9585a55c8fbeb6ee10c340825937196d7481ce60fb9b4567df245c8a1855eb5d44c2bad491deed13500da783aecaeff4933b708e191def70e7fd86a09a4aa02
- SSDEEP 98304:BemTLkNdfE0pZrw56utgpPFotBER/mQ327:Q+p56utgpPF8u/S
- TLSH T130367B91FDEB00F2E64B1630CCA7576FA731770A0335D6C7EA600F56EA276E16A32611
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
XMRig Miner payload
-
Executes dropped EXE