2026-07-02_a24874041d35d84b2d3924f974967e06_agent-tesla_akira_amadey_cobalt-strike_coinminer_cryptbot_darkgate_elex_gcleaner_glassworm_hawkeye_icedid_loki-bot_luca-stealer_njrat_ramnit_remcos_smoke-loader_stealc_vidar_wannacry

General

Target
2026-07-02_a24874041d35d84b2d3924f974967e06_agent-tesla_akira_amadey_cobalt-strike_coinminer_cryptbot_darkgate_elex_gcleaner_glassworm_hawkeye_icedid_loki-bot_luca-stealer_njrat_ramnit_remcos_smoke-loader_stealc_vidar_wannacry
Size 35.7MB
Sample260702-ym4xesav6k
SHA256 96e782157a37b8df2bd8ad024b833e89848b45e6de73b8c4737bba60b1f9d745
MD5 a24874041d35d84b2d3924f974967e06
SHA1 bcc7a021f7df01b9499b061c6e5db06d52714aa8
SHA512 af513150a8cbdc5d3f6a220495ba5885f9c654cc7cec43345e2ae0c7a04058923364c35404cfd31863386658d98da1bf7b056a633cac786b7dc0f8c48a2b77f3
SSDEEP 786432:SYE6LJ4M/qkv+ux9tUxgvOj7ZM/X1+XFH6Jk2M:SYE6LJv/LGk9tGVj7uX10Faq2M
TLSH
T13187D0A69AB002E1F97A8434CE52A626D9317C154B608BCF369CB65F1F737F2583E341
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

installer

Malware Config

Signatures

Custom signature

Detects executables Discord URL observed in first stage droppers 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_DiscordURL

Custom signature

Detects executables containing possible sandbox analysis VM usernames 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_SandboxUserNames

Custom signature

Detects executables embedding registry key / value combination indicative of disabling Windows Defen 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RegKeyComb_DisableWinDefender

Custom signature

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-02_a24874041d35d84b2d3924f974967e06_agent-tesla_akira_amadey_cobalt-strike_coinminer_cryptbot_darkgate_elex_gcleaner_glassworm_hawkeye_icedid_loki-bot_luca-stealer_njrat_ramnit_remcos_smoke-loader_stealc_vidar_wannacry

Inno Setup is an open-source installation builder for Windows applications. 1 IoCs

Inno Setup installer

installer

resource	yara_rule
sample	innosetup

File Explorer

2026-07-02_a24874041d35d84b2d3924f974967e06_agent-tesla_akira_amadey_cobalt-strike_coinminer_cryptbot_darkgate_elex_gcleaner_glassworm_hawkeye_icedid_loki-bot_luca-stealer_njrat_ramnit_remcos_smoke-loader_stealc_vidar_wannacry

.exe 35.7MB