General
- Target 2026-06-27_d1b0c668d8917f0650a4cbcb813003c0_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 10.8MB
- Sample260629-c43vssbv5v
- SHA256 a51f5798e0aafcaf0d158a28beadfa6dbfdaa964632d3f5082498bfc1b050226
- MD5 d1b0c668d8917f0650a4cbcb813003c0
- SHA1 0a86070bddc3f38360c4961705fabf5ae4a718a7
- SHA512 1f76f7e5343923987c2d1685b8fbea9245aae4d0e48dda7a234dbb9912f24d3e4dd64149cae2618c93a716b8d69a7ba587dc0de39a165d730822d202221c1cd0
- SSDEEP 196608:wNbnLDbdppqHP0vi/qn/y15fhmpLbHgWKTDqw7L+K+ZcY/B3t:obnLdw8v4qn/y1F+fX8H+KK
- TLSH T1D4B6F1369AA01F95F833913403A6C552DA2E7C3A632047CF779CF64A2BB32D1547E61E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-06-27_d1b0c668d8917f0650a4cbcb813003c0_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_d1b0c668d8917f0650a4cbcb813003c0_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260617-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_d1b0c668d8917f0650a4cbcb813003c0_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 10.8MB
- SHA256 a51f5798e0aafcaf0d158a28beadfa6dbfdaa964632d3f5082498bfc1b050226
- MD5 d1b0c668d8917f0650a4cbcb813003c0
- SHA1 0a86070bddc3f38360c4961705fabf5ae4a718a7
- SHA512 1f76f7e5343923987c2d1685b8fbea9245aae4d0e48dda7a234dbb9912f24d3e4dd64149cae2618c93a716b8d69a7ba587dc0de39a165d730822d202221c1cd0
- SSDEEP 196608:wNbnLDbdppqHP0vi/qn/y15fhmpLbHgWKTDqw7L+K+ZcY/B3t:obnLdw8v4qn/y1F+fX8H+KK
- TLSH T1D4B6F1369AA01F95F833913403A6C552DA2E7C3A632047CF779CF64A2BB32D1547E61E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE