General
- Target 2026-07-06_e5f3fa1d657fdd72ecafc61624d8a081_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 10.8MB
- Sample260706-v3ka6sd16p
- SHA256 08eca5b0e44a48c2b52ef3eb8da6dbd925075f300ef56c0aaa23c28c41891325
- MD5 e5f3fa1d657fdd72ecafc61624d8a081
- SHA1 7cf4a0a552c8ec64131791adaa3f01a00f8f5787
- SHA512 a386b1802729cb69f9d0f66da21bd8a9bdac528e5a06e8c994f20a51c7656a5c29942161bd86dcb14f03194ae1c19f87f8eceaede8614a44173379831258ef0b
- SSDEEP 196608:wNbnLDgdppqHP0vi/qn/q1GfWmpL6HgWKT6qw5L+K+Z8I/B6t:obnwdw8v4qn/q1Md4X8O+q6
- TLSH T1E8B6F1369AA01F95F833913403A6C552DA2E7C3A632047CF779CF64A2BB32D1547E61E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-06_e5f3fa1d657fdd72ecafc61624d8a081_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_e5f3fa1d657fdd72ecafc61624d8a081_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260706-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_e5f3fa1d657fdd72ecafc61624d8a081_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 10.8MB
- SHA256 08eca5b0e44a48c2b52ef3eb8da6dbd925075f300ef56c0aaa23c28c41891325
- MD5 e5f3fa1d657fdd72ecafc61624d8a081
- SHA1 7cf4a0a552c8ec64131791adaa3f01a00f8f5787
- SHA512 a386b1802729cb69f9d0f66da21bd8a9bdac528e5a06e8c994f20a51c7656a5c29942161bd86dcb14f03194ae1c19f87f8eceaede8614a44173379831258ef0b
- SSDEEP 196608:wNbnLDgdppqHP0vi/qn/q1GfWmpL6HgWKT6qw5L+K+Z8I/B6t:obnwdw8v4qn/q1Md4X8O+q6
- TLSH T1E8B6F1369AA01F95F833913403A6C552DA2E7C3A632047CF779CF64A2BB32D1547E61E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE