General
- Target 2026-09-12_a9e8f6195316649b883aee269eec156d_cobalt-strike_coinminer_glassworm_poet-rat_quasar-rat_xmrig
- Size 10.6MB
- Sample260912-ynrngsel71
- SHA256 3a84149d2a3e73640850fd62329f27b5c75df7305b79fbfd900e8b563f96fe91
- MD5 a9e8f6195316649b883aee269eec156d
- SHA1 0f211e99d8cd0061b30d8fca11877a7a139d7bca
- SHA512 995ddaca0174686eff4028566099dc71df07d771e01bc17ad0c74ccdf39bab9c00d769924880833efde5f570ab86f51e48e426a6fae4aa15232a1c1693e1f7e5
- SSDEEP 196608:m2XrSIqtPazmgL7uDbzV0xpZr8o37nmPQLi7gCsLm:maWIPyquDCzzmPfgCF
- TLSH T161B67C27F4A300F9C67FD17086579772BA31786A42307BAB1F90EA751E12F906B2E714
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-12_a9e8f6195316649b883aee269eec156d_cobalt-strike_coinminer_glassworm_poet-rat_quasar-rat_xmrig.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-12_a9e8f6195316649b883aee269eec156d_cobalt-strike_coinminer_glassworm_poet-rat_quasar-rat_xmrig
- Size 10.6MB
- SHA256 3a84149d2a3e73640850fd62329f27b5c75df7305b79fbfd900e8b563f96fe91
- MD5 a9e8f6195316649b883aee269eec156d
- SHA1 0f211e99d8cd0061b30d8fca11877a7a139d7bca
- SHA512 995ddaca0174686eff4028566099dc71df07d771e01bc17ad0c74ccdf39bab9c00d769924880833efde5f570ab86f51e48e426a6fae4aa15232a1c1693e1f7e5
- SSDEEP 196608:m2XrSIqtPazmgL7uDbzV0xpZr8o37nmPQLi7gCsLm:maWIPyquDCzzmPfgCF
- TLSH T161B67C27F4A300F9C67FD17086579772BA31786A42307BAB1F90EA751E12F906B2E714
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
XMRig Miner payload