General
- Target 2026-06-26_0d8dd9c6148de4c3a886faf0def2fe4c_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 7.6MB
- Sample260629-wwe9bac16l
- SHA256 2bfce2867ee4c77b941e2986b5c7a7ea7337dc618134b9999a3bde0e3afd6c2f
- MD5 0d8dd9c6148de4c3a886faf0def2fe4c
- SHA1 9ad154d2edbc7f13cad4f5057c41db443d3124f3
- SHA512 436f18b486ddb713f1c7a564cdb16e24986f3da7f112587b726f38ae9945090abe150e90d38aeb3fdd47df2370c248f0ee1c357f9b1cbd2d959e9c68ebcf1197
- SSDEEP 196608:EPtvi/Mn/Rz5fmmpLDHgWKL6qw5LTK+lrXcB3z:Elv4Mn/RzFtnXEOTFs1
- TLSH T1F5860139E9A01ED4F033A6344661D551E2A97C7E63208BCF27D9B50A3B337E1607FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-06-26_0d8dd9c6148de4c3a886faf0def2fe4c_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-26_0d8dd9c6148de4c3a886faf0def2fe4c_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-26_0d8dd9c6148de4c3a886faf0def2fe4c_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 7.6MB
- SHA256 2bfce2867ee4c77b941e2986b5c7a7ea7337dc618134b9999a3bde0e3afd6c2f
- MD5 0d8dd9c6148de4c3a886faf0def2fe4c
- SHA1 9ad154d2edbc7f13cad4f5057c41db443d3124f3
- SHA512 436f18b486ddb713f1c7a564cdb16e24986f3da7f112587b726f38ae9945090abe150e90d38aeb3fdd47df2370c248f0ee1c357f9b1cbd2d959e9c68ebcf1197
- SSDEEP 196608:EPtvi/Mn/Rz5fmmpLDHgWKL6qw5LTK+lrXcB3z:Elv4Mn/RzFtnXEOTFs1
- TLSH T1F5860139E9A01ED4F033A6344661D551E2A97C7E63208BCF27D9B50A3B337E1607FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects KawaiiUnicorn
- Custom signature
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE