General
- Target 2026-07-01_004bd623fea0927a6e7ce1269d2e3143_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 12.8MB
- Sample260701-ph5tgsd12p
- SHA256 aabf694103f989536fbecdb1fad1fe78e7b8a8efcbb2d0189f4c25387d3fb98b
- MD5 004bd623fea0927a6e7ce1269d2e3143
- SHA1 d43b45ff8a798788d13296e9fb7a5092895bebf2
- SHA512 1842c179ff97fc6b9e1821d11c6a31220d60ebec2174338638b11063962ade58ea14931f02e18968e0174cb02480407c3e103a032b4083499d5e64383ffa39b9
- SSDEEP 393216:RJEKUxqnYIbnYdL8v4Mn/R1FtPXEuYhh:RtUxgY2ILZM/LbPXp
- TLSH T108D6F1269AA01F95F833413403A68952D92E7C3E636047CF779CFA4A3BB36D1147E61E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-01_004bd623fea0927a6e7ce1269d2e3143_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_004bd623fea0927a6e7ce1269d2e3143_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260630-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_004bd623fea0927a6e7ce1269d2e3143_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 12.8MB
- SHA256 aabf694103f989536fbecdb1fad1fe78e7b8a8efcbb2d0189f4c25387d3fb98b
- MD5 004bd623fea0927a6e7ce1269d2e3143
- SHA1 d43b45ff8a798788d13296e9fb7a5092895bebf2
- SHA512 1842c179ff97fc6b9e1821d11c6a31220d60ebec2174338638b11063962ade58ea14931f02e18968e0174cb02480407c3e103a032b4083499d5e64383ffa39b9
- SSDEEP 393216:RJEKUxqnYIbnYdL8v4Mn/R1FtPXEuYhh:RtUxgY2ILZM/LbPXp
- TLSH T108D6F1269AA01F95F833413403A68952D92E7C3E636047CF779CFA4A3BB36D1147E61E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE