General
- Target 2026-07-08_14b70c88791a182bf630677a8379e961_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample260708-fmzzcsbt4x
- SHA256 198f4d0df67156a951fdf1572b0a75fa74529132aa81eb2811bbc691f603d028
- MD5 14b70c88791a182bf630677a8379e961
- SHA1 a1d7d8525134100ed37ba699647b2519061f39d9
- SHA512 5c562fbc6ef0c0cf0e09b5e42fbf9e66917a560de675a3f1353e61a78461f7f7fcdc01a2012f6e12a74b2f8dc05c90289248ded4e52160d62c226e22f3412bdb
- SSDEEP 196608:EP0vi/Mn/R15fmmpLTHgWKLM1w5LYK+ZrjNB3t:E8v4Mn/R1FtPXEDYhB
- TLSH T13F86F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798FA0A2B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-08_14b70c88791a182bf630677a8379e961_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_14b70c88791a182bf630677a8379e961_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260706-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_14b70c88791a182bf630677a8379e961_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 198f4d0df67156a951fdf1572b0a75fa74529132aa81eb2811bbc691f603d028
- MD5 14b70c88791a182bf630677a8379e961
- SHA1 a1d7d8525134100ed37ba699647b2519061f39d9
- SHA512 5c562fbc6ef0c0cf0e09b5e42fbf9e66917a560de675a3f1353e61a78461f7f7fcdc01a2012f6e12a74b2f8dc05c90289248ded4e52160d62c226e22f3412bdb
- SSDEEP 196608:EP0vi/Mn/R15fmmpLTHgWKLM1w5LYK+ZrjNB3t:E8v4Mn/R1FtPXEDYhB
- TLSH T13F86F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798FA0A2B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE