General
- Target 2026-07-03_7eb6c98de68db0edf3c2b27e373dad2e_agent-tesla_cobalt-strike_cryptbot_darkgate_elex_gcleaner_glassworm_icedid_loki-bot_njrat_stealc_vidar
- Size 21.8MB
- Sample260703-v97p2sdt61
- SHA256 871a89fcb6303f7bca2cfc7dd8acba2e554e77f5778c94b26c3096f5ac26a48d
- MD5 7eb6c98de68db0edf3c2b27e373dad2e
- SHA1 ec3cc898da96964233af7043fb8eada661dabecd
- SHA512 863ea4d0ae0f50470718f1b007f1d764f74eba52ccc46b0e370a89f1f29876ea230654c1ee23a8a54a3ebd5117b5664dc55b682bed9e1dd41ad86231e653421b
- SSDEEP 393216:bJsQXI3kGyt+qNxG/lVt+SbJEKUxqnvQwnJd78v4Mn/R1Ft+XEOThe:b/qkv+uxEtUxgvT37ZM/Lb+XFw
- TLSH T13537D0B689701691FE3A4834CEA2A964CD357C291FA0CBCF2954B18F67736F3543D289
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-03_7eb6c98de68db0edf3c2b27e373dad2e_agent-tesla_cobalt-strike_cryptbot_darkgate_elex_gcleane.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-03_7eb6c98de68db0edf3c2b27e373dad2e_agent-tesla_cobalt-strike_cryptbot_darkgate_elex_gcleane.exe
Resource
win11ltsc2024-20260629-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_7eb6c98de68db0edf3c2b27e373dad2e_agent-tesla_cobalt-strike_cryptbot_darkgate_elex_gcleaner_glassworm_icedid_loki-bot_njrat_stealc_vidar
- Size 21.8MB
- SHA256 871a89fcb6303f7bca2cfc7dd8acba2e554e77f5778c94b26c3096f5ac26a48d
- MD5 7eb6c98de68db0edf3c2b27e373dad2e
- SHA1 ec3cc898da96964233af7043fb8eada661dabecd
- SHA512 863ea4d0ae0f50470718f1b007f1d764f74eba52ccc46b0e370a89f1f29876ea230654c1ee23a8a54a3ebd5117b5664dc55b682bed9e1dd41ad86231e653421b
- SSDEEP 393216:bJsQXI3kGyt+qNxG/lVt+SbJEKUxqnvQwnJd78v4Mn/R1Ft+XEOThe:b/qkv+uxEtUxgvT37ZM/Lb+XFw
- TLSH T13537D0B689701691FE3A4834CEA2A964CD357C291FA0CBCF2954B18F67736F3543D289
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE