General
- Target 2026-07-02_f6fff55f90ec98f148b7619dfdf35e50_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample260702-lnj77afv4s
- SHA256 5aa8abf27ef54ffe4798c2b6ab42590913f00bf644ef1b7078df6c2b96ac3844
- MD5 f6fff55f90ec98f148b7619dfdf35e50
- SHA1 c97eb117bb6783c9f5c8bcda246cc5552694c028
- SHA512 2b39e34c0d32051e370b9cabcb87394ae0c79cbc9bff27097bdf1744338d3e484b53b282a6321f87601998b9d88a32238af5cbc4bd0781b0ed798af9ce706832
- SSDEEP 196608:EP0vtwqn/B15fmmpLhHgEKLcqw5LTK+ZrFuB3e:E8vCqn/B1FtVlEgThs
- TLSH T1D686F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-02_f6fff55f90ec98f148b7619dfdf35e50_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_f6fff55f90ec98f148b7619dfdf35e50_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_f6fff55f90ec98f148b7619dfdf35e50_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 5aa8abf27ef54ffe4798c2b6ab42590913f00bf644ef1b7078df6c2b96ac3844
- MD5 f6fff55f90ec98f148b7619dfdf35e50
- SHA1 c97eb117bb6783c9f5c8bcda246cc5552694c028
- SHA512 2b39e34c0d32051e370b9cabcb87394ae0c79cbc9bff27097bdf1744338d3e484b53b282a6321f87601998b9d88a32238af5cbc4bd0781b0ed798af9ce706832
- SSDEEP 196608:EP0vtwqn/B15fmmpLhHgEKLcqw5LTK+ZrFuB3e:E8vCqn/B1FtVlEgThs
- TLSH T1D686F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE