General
- Target 2026-07-03_82d09b597a957e9ed67a77da6eaa3d2f_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample260703-pnx1tshs4v
- SHA256 a3590414d96d0af4cb589c76d30e8625c7fc9f84d40dcdce779b08548ff58f9b
- MD5 82d09b597a957e9ed67a77da6eaa3d2f
- SHA1 27052157988da70f4c9ccf3fb9e19456532d1559
- SHA512 5ffd112ca5d924dd6cd71858b56866cfa033067eae057cae9ccdeacae0ce2414c61fddf94affb2ce19be32a8e31d863e79099c85055b90d144e2a96ac1d950f8
- SSDEEP 196608:EP0vixqn/j1KfmmpLWHg3qL6cw5L+K+ZrXA83G:E8v+qn/j1ots2k4+hw
- TLSH T10986F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-03_82d09b597a957e9ed67a77da6eaa3d2f_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-03_82d09b597a957e9ed67a77da6eaa3d2f_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260629-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_82d09b597a957e9ed67a77da6eaa3d2f_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 a3590414d96d0af4cb589c76d30e8625c7fc9f84d40dcdce779b08548ff58f9b
- MD5 82d09b597a957e9ed67a77da6eaa3d2f
- SHA1 27052157988da70f4c9ccf3fb9e19456532d1559
- SHA512 5ffd112ca5d924dd6cd71858b56866cfa033067eae057cae9ccdeacae0ce2414c61fddf94affb2ce19be32a8e31d863e79099c85055b90d144e2a96ac1d950f8
- SSDEEP 196608:EP0vixqn/j1KfmmpLWHg3qL6cw5L+K+ZrXA83G:E8v+qn/j1ots2k4+hw
- TLSH T10986F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE