General
- Target 2026-07-06_ac45c231dab31668e2a1378bfc12cfc9_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample260707-b2xqbsft8w
- SHA256 6af1530445b969d98b2ffcad596320c220488f53f0092450a3ed0f87e59dcc59
- MD5 ac45c231dab31668e2a1378bfc12cfc9
- SHA1 d40ac1489168134cecdc8c9f43f56e770d245df5
- SHA512 6b4868e3fa56c25d53e7e9d7bbb026259781e8596e9f9069cf09f867cdb443350b6d422181cb7f3a77a6dd95f215eaeb77103d1eb37af1bcbb15aac8bd0990f8
- SSDEEP 196608:/PYpS/qn/S1Gfmm7LVHgWOTOqw8L+K+Z8F/h3t:/wpIqn/S1Mf5XIn+qZ
- TLSH T1C086F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-06_ac45c231dab31668e2a1378bfc12cfc9_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_ac45c231dab31668e2a1378bfc12cfc9_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260706-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_ac45c231dab31668e2a1378bfc12cfc9_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 6af1530445b969d98b2ffcad596320c220488f53f0092450a3ed0f87e59dcc59
- MD5 ac45c231dab31668e2a1378bfc12cfc9
- SHA1 d40ac1489168134cecdc8c9f43f56e770d245df5
- SHA512 6b4868e3fa56c25d53e7e9d7bbb026259781e8596e9f9069cf09f867cdb443350b6d422181cb7f3a77a6dd95f215eaeb77103d1eb37af1bcbb15aac8bd0990f8
- SSDEEP 196608:/PYpS/qn/S1Gfmm7LVHgWOTOqw8L+K+Z8F/h3t:/wpIqn/S1Mf5XIn+qZ
- TLSH T1C086F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE