General
- Target 2026-07-06_9c688eefd6f30e3079426c64f7e03e0a_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample260706-sdwlsscw3m
- SHA256 ea26be43ccc8764ec7d61d4a4a4c6edd3ee175bed7f1e8e6462ddba0874f4b5f
- MD5 9c688eefd6f30e3079426c64f7e03e0a
- SHA1 f0f0200bd65ef8f7119197ddc79ca5188af58b3b
- SHA512 efe4d1f9e903d40e4347a5bd326d1ba4ff55aeca7b95ab3c033868f98078edcc053bd0c8ecb0f8c034672eaae805b1ed4df58b93c38f61b6f65ea495b65a7ee8
- SSDEEP 196608:EPIip/qX/915fmmpLbHgWKL6pwULTK+ZrX8BTj:EAiBqX/91FtXXEQThM
- TLSH T13586F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-06_9c688eefd6f30e3079426c64f7e03e0a_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_9c688eefd6f30e3079426c64f7e03e0a_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_9c688eefd6f30e3079426c64f7e03e0a_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 ea26be43ccc8764ec7d61d4a4a4c6edd3ee175bed7f1e8e6462ddba0874f4b5f
- MD5 9c688eefd6f30e3079426c64f7e03e0a
- SHA1 f0f0200bd65ef8f7119197ddc79ca5188af58b3b
- SHA512 efe4d1f9e903d40e4347a5bd326d1ba4ff55aeca7b95ab3c033868f98078edcc053bd0c8ecb0f8c034672eaae805b1ed4df58b93c38f61b6f65ea495b65a7ee8
- SSDEEP 196608:EPIip/qX/915fmmpLbHgWKL6pwULTK+ZrX8BTj:EAiBqX/91FtXXEQThM
- TLSH T13586F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE