Analysis
- max time kernel
148s - max time network
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
20/10/2026, 20:52
General
- Target 2026-10-19_4f16f7c11828dc62239722d628d3880b_amadey_cobalt-strike_coinminer_glassworm_poet-rat_smoke-loader_vidar.exe
- Size 5.7MB
- Sample261020-znq8dsv1az
- SHA256 365ef16602d9dae223458483f38901adcd67e627dcc71f347d71475de36969b2
Score
10/10
Malware Config
Signatures
- Family: xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
- XMRig Miner payload 1 IoCs
- Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-10-19_4f16f7c11828dc62239722d628d3880b_amadey_cobalt-strike_coinminer_glassworm_poet-rat_smoke-loader_vidar.exe"C:\Users\Admin\AppData\Local\Temp\2026-10-19_4f16f7c11828dc62239722d628d3880b_amadey_cobalt-strike_coinminer_glassworm_poet-rat_smoke-loader_vidar.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1840-1-0x000001E29AA90000-0x000001E29AAA0000-memory.dmp
memory/1840-0-0x00007FF7F9E50000-0x00007FF7FA19D000-memory.dmp