General
- Target 2026-09-07_21601b57d692263ac25fb6de525ba6bf_amadey_cobalt-strike_coinminer_glassworm_poet-rat_quasar-rat_xmrig
- Size 10.5MB
- Sample260909-gd2x2asald
- SHA256 a19c90d5dd8d8419512cd6816068beb5a2f28af2b81334aff146073de2754792
- MD5 21601b57d692263ac25fb6de525ba6bf
- SHA1 ebbf2e4edaf5da36f72422131ebda78bee1400a9
- SHA512 05f332438c75047335c7f1a8d7e98363faac7c07b852204caf14a0db31beacc013d0cf0781bf756c423f8446f118180a4e3715d19bbf0c6bc0213235aa07f6d9
- SSDEEP 196608:Jvg6YpjCa8BMHwNuD7PKUNwabNJvmrMQwHEFoWD:JYXpkG6uDBuQjmrOHA
- TLSH T15BB67C27F5A204FDC67FE17082979732BA31786942307BAB1B90DA752F12F906B2D714
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-07_21601b57d692263ac25fb6de525ba6bf_amadey_cobalt-strike_coinminer_glassworm_poet-rat_quasar-rat_xmrig.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-07_21601b57d692263ac25fb6de525ba6bf_amadey_cobalt-strike_coinminer_glassworm_poet-rat_quasar-rat_xmrig
- Size 10.5MB
- SHA256 a19c90d5dd8d8419512cd6816068beb5a2f28af2b81334aff146073de2754792
- MD5 21601b57d692263ac25fb6de525ba6bf
- SHA1 ebbf2e4edaf5da36f72422131ebda78bee1400a9
- SHA512 05f332438c75047335c7f1a8d7e98363faac7c07b852204caf14a0db31beacc013d0cf0781bf756c423f8446f118180a4e3715d19bbf0c6bc0213235aa07f6d9
- SSDEEP 196608:Jvg6YpjCa8BMHwNuD7PKUNwabNJvmrMQwHEFoWD:JYXpkG6uDBuQjmrOHA
- TLSH T15BB67C27F5A204FDC67FE17082979732BA31786942307BAB1B90DA752F12F906B2D714
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
Detects executables containing URLs to raw contents of a Github gist
XMRig Miner payload