General
- Target 2026-07-08_9692506c3311845acbd1d275d40c640a_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample260708-japjmsdv5n
- SHA256 77e974db4f1324c3d3653ce022f9dc38044b7b541e6110ae4bc4d188a24d8096
- MD5 9692506c3311845acbd1d275d40c640a
- SHA1 5ee18e56482392d81d147f555b5d5605af50045a
- SHA512 93fdd6e9987ff1e9401fe02aaffb22d1702f6d763bd4532388e4356870d88c8fe6fdaef9148b850688690330574af1890b8b531781f87110d7580c283600178b
- SSDEEP 196608:EPdvi/qn/B1VfmmpLWHgWKL6qw5L+K+ZyX/B3t:EVv4qn/B15tcXEO+Iv
- TLSH T1E286F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-08_9692506c3311845acbd1d275d40c640a_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_9692506c3311845acbd1d275d40c640a_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260706-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_9692506c3311845acbd1d275d40c640a_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 77e974db4f1324c3d3653ce022f9dc38044b7b541e6110ae4bc4d188a24d8096
- MD5 9692506c3311845acbd1d275d40c640a
- SHA1 5ee18e56482392d81d147f555b5d5605af50045a
- SHA512 93fdd6e9987ff1e9401fe02aaffb22d1702f6d763bd4532388e4356870d88c8fe6fdaef9148b850688690330574af1890b8b531781f87110d7580c283600178b
- SSDEEP 196608:EPdvi/qn/B1VfmmpLWHgWKL6qw5L+K+ZyX/B3t:EVv4qn/B15tcXEO+Iv
- TLSH T1E286F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE