General
- Target 2026-07-03_1f9b638a94706380b88c1930f6900458_agent-tesla_amadey_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_luca-stealer_njrat_ramnit_smoke-loader_stealc_vidar_wannacry
- Size 20.5MB
- Sample260703-e4lmmabv2z
- SHA256 bc536e042d11a9a35e4cc4aec5bada9d1abe82f7607f8dc0394dd4c978222404
- MD5 1f9b638a94706380b88c1930f6900458
- SHA1 b8d5d7a06a914edb290377d87e5a9882885d7c81
- SHA512 314d2a00c826f41ff80235d099427e24cbb8124a8c1796d67a91ebceffdd87cd58c14df8e60639e03c9091c3897237e38de49d0cfaf16f93f45202977ad9afa1
- SSDEEP 393216:/+S+JEKUxqnv9bntd98v4Mn/R1Ft+1EOThs26Jk2NyEsv:m9tUxgvxj9ZM/Lb+1FH6Jk2ct
- TLSH T1C327D0B28D705691FE3A4C35CEA1AA6489357C291F60CBCF2905B18F67736F7603D289
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-03_1f9b638a94706380b88c1930f6900458_agent-tesla_amadey_cobalt-strike_coinminer_cryptbot_elex.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-03_1f9b638a94706380b88c1930f6900458_agent-tesla_amadey_cobalt-strike_coinminer_cryptbot_elex.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_1f9b638a94706380b88c1930f6900458_agent-tesla_amadey_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_luca-stealer_njrat_ramnit_smoke-loader_stealc_vidar_wannacry
- Size 20.5MB
- SHA256 bc536e042d11a9a35e4cc4aec5bada9d1abe82f7607f8dc0394dd4c978222404
- MD5 1f9b638a94706380b88c1930f6900458
- SHA1 b8d5d7a06a914edb290377d87e5a9882885d7c81
- SHA512 314d2a00c826f41ff80235d099427e24cbb8124a8c1796d67a91ebceffdd87cd58c14df8e60639e03c9091c3897237e38de49d0cfaf16f93f45202977ad9afa1
- SSDEEP 393216:/+S+JEKUxqnv9bntd98v4Mn/R1Ft+1EOThs26Jk2NyEsv:m9tUxgvxj9ZM/Lb+1FH6Jk2ct
- TLSH T1C327D0B28D705691FE3A4C35CEA1AA6489357C291F60CBCF2905B18F67736F7603D289
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE