General
- Target 2026-09-10_1dbc0f504e5129bb7e6ec6c11eb2069e_cobalt-strike_coinminer_glassworm_poet-rat_quasar-rat
- Size 7.6MB
- Sample260910-xzx4zavcqa
- SHA256 66de044b1c0674c8ea203fdecf0790c8e3f6a401fbad99f80281a4aa89f89ec7
- MD5 1dbc0f504e5129bb7e6ec6c11eb2069e
- SHA1 19ff998786898b208d56ca7779997bdb80d5da28
- SHA512 70219d2ef762460181b0e5caaceba900f249ab396ff19863eaf1636d45d5d389113b0d633dcacf6a48649f37ef811853c33bc1ffa28a7016dc1a8b06723b45b8
- SSDEEP 196608:Rz+LQRw2oe9M8aoVouDhAggL5wH/m2BK:kERZLUzuDOv4m2
- TLSH T15C864B17F8E304F9C67EE07086969772BA71749943317B971F90D6A52B12FE0AA3E310
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-10_1dbc0f504e5129bb7e6ec6c11eb2069e_cobalt-strike_coinminer_glassworm_poet-rat_quasar-rat.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-10_1dbc0f504e5129bb7e6ec6c11eb2069e_cobalt-strike_coinminer_glassworm_poet-rat_quasar-rat
- Size 7.6MB
- SHA256 66de044b1c0674c8ea203fdecf0790c8e3f6a401fbad99f80281a4aa89f89ec7
- MD5 1dbc0f504e5129bb7e6ec6c11eb2069e
- SHA1 19ff998786898b208d56ca7779997bdb80d5da28
- SHA512 70219d2ef762460181b0e5caaceba900f249ab396ff19863eaf1636d45d5d389113b0d633dcacf6a48649f37ef811853c33bc1ffa28a7016dc1a8b06723b45b8
- SSDEEP 196608:Rz+LQRw2oe9M8aoVouDhAggL5wH/m2BK:kERZLUzuDOv4m2
- TLSH T15C864B17F8E304F9C67EE07086969772BA71749943317B971F90D6A52B12FE0AA3E310
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
XMRig Miner payload