General
- Target 2026-07-03_84c584b0d7c34234cde1b4e18beff20c_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_luca-stealer_njrat_ramnit_stealc_vidar
- Size 8.6MB
- Sample260703-pnsfcahs3z
- SHA256 50b8f0616b1a1b060e6ac86acdf622738b2e693dac83c9a13186ff4b538ec81e
- MD5 84c584b0d7c34234cde1b4e18beff20c
- SHA1 8238d997507c6e89b8b4ea06fe732f1733e8c9ee
- SHA512 c407e6abfbe43d8a28b7be6d4dd41ba521b11987bb866f37362ed1553d2577b272878086a8011b58e4d19674040fefffac9feb6ec9c7559e7464080eba318cfd
- SSDEEP 196608:EP0vi/Mn/R15fmmpL0HgWKL6qw5LTK+ZrXcBstfdg7:E8v4Mn/R1FtqXEOThs6a
- TLSH T1F496F139E9A01EE4F433A2344662D551D1697C3E632087CF2798FA0A3B337E1657FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-03_84c584b0d7c34234cde1b4e18beff20c_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-03_84c584b0d7c34234cde1b4e18beff20c_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_84c584b0d7c34234cde1b4e18beff20c_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_luca-stealer_njrat_ramnit_stealc_vidar
- Size 8.6MB
- SHA256 50b8f0616b1a1b060e6ac86acdf622738b2e693dac83c9a13186ff4b538ec81e
- MD5 84c584b0d7c34234cde1b4e18beff20c
- SHA1 8238d997507c6e89b8b4ea06fe732f1733e8c9ee
- SHA512 c407e6abfbe43d8a28b7be6d4dd41ba521b11987bb866f37362ed1553d2577b272878086a8011b58e4d19674040fefffac9feb6ec9c7559e7464080eba318cfd
- SSDEEP 196608:EP0vi/Mn/R15fmmpL0HgWKL6qw5LTK+ZrXcBstfdg7:E8v4Mn/R1FtqXEOThs6a
- TLSH T1F496F139E9A01EE4F433A2344662D551D1697C3E632087CF2798FA0A3B337E1657FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE