General
- Target 2026-06-26_d91661ea7507daa4273971f0cf8a78bb_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 10.8MB
- Sample260629-n2a8jsct5z
- SHA256 1da722354f40ec2def1ed78bfc4156d0c43208dd569e4df80cf211a3bd304d6f
- MD5 d91661ea7507daa4273971f0cf8a78bb
- SHA1 ed77e2a4b95c6b9f156cff046910c82d9b5e730d
- SHA512 65fd1e15d7ca9cc125a8dcb167ac6d4dcf90fc6dcc3b225ac5396ee2d3ab456886c8c37d3fbe8b33372f8925d212b97116307cd864bf97c4d22bafc8128cc6e5
- SSDEEP 196608:wZbnLD9dppqHP0pi/qn/q1GfmmpLJHgWKT6qw5L+K+Z8X/B3t:0bntdw8p4qn/q1MtlX8O+qv
- TLSH T169B6F1369AA01F95F833913403A6C552DA2E7C3A632047CF779CF64A2BB32D1547E61E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-06-26_d91661ea7507daa4273971f0cf8a78bb_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-26_d91661ea7507daa4273971f0cf8a78bb_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-26_d91661ea7507daa4273971f0cf8a78bb_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 10.8MB
- SHA256 1da722354f40ec2def1ed78bfc4156d0c43208dd569e4df80cf211a3bd304d6f
- MD5 d91661ea7507daa4273971f0cf8a78bb
- SHA1 ed77e2a4b95c6b9f156cff046910c82d9b5e730d
- SHA512 65fd1e15d7ca9cc125a8dcb167ac6d4dcf90fc6dcc3b225ac5396ee2d3ab456886c8c37d3fbe8b33372f8925d212b97116307cd864bf97c4d22bafc8128cc6e5
- SSDEEP 196608:wZbnLD9dppqHP0pi/qn/q1GfmmpLJHgWKT6qw5L+K+Z8X/B3t:0bntdw8p4qn/q1MtlX8O+qv
- TLSH T169B6F1369AA01F95F833913403A6C552DA2E7C3A632047CF779CF64A2BB32D1547E61E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE