General
- Target 2026-06-27_388210076238103bae652da4dc9c4e50_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample260629-kb61rag13x
- SHA256 2d54ded31c2bade1c79e7a1c9ce80f1eef5fdb757471a86ad79781aaefebda9b
- MD5 388210076238103bae652da4dc9c4e50
- SHA1 4c9733e98c94ead514ab6c3af75e246de6232d17
- SHA512 dcc1790e347d0a53afc45b8bc6f6608e8f904018685eb4eeabe1286fcd3e46d6e0c1680297f1eaea70c325838ecd59f9d8d3096ac3fcfebcb909f91d1438ee0b
- SSDEEP 196608:ePPIi/qB/S1GfmmjLjHgWKsEqw5L+K+Z8X/B3t:eHI4qB/S1MfvXj4+qv
- TLSH T1BA86F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-06-27_388210076238103bae652da4dc9c4e50_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_388210076238103bae652da4dc9c4e50_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260618-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_388210076238103bae652da4dc9c4e50_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 2d54ded31c2bade1c79e7a1c9ce80f1eef5fdb757471a86ad79781aaefebda9b
- MD5 388210076238103bae652da4dc9c4e50
- SHA1 4c9733e98c94ead514ab6c3af75e246de6232d17
- SHA512 dcc1790e347d0a53afc45b8bc6f6608e8f904018685eb4eeabe1286fcd3e46d6e0c1680297f1eaea70c325838ecd59f9d8d3096ac3fcfebcb909f91d1438ee0b
- SSDEEP 196608:ePPIi/qB/S1GfmmjLjHgWKsEqw5L+K+Z8X/B3t:eHI4qB/S1MfvXj4+qv
- TLSH T1BA86F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE