General
- Target 2026-07-08_6344e49848d045dbcea3266bb7e2c13f_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample260708-jb2wcsdv9m
- SHA256 49dcc66f0f99d102a80cbd0a37a3a1a313a5beab1bae06a5b791bcc054d25212
- MD5 6344e49848d045dbcea3266bb7e2c13f
- SHA1 467fe5962fbdb148659f75253e81c38ecca1e587
- SHA512 724e8073868af31db1525fc9bf0f86c7f8b0b17448e8a6ca6432d4e8566fc769a140a6add0252f713e0af9a32d0d34bd6cb6db1795fba7257cf23dd36090b301
- SSDEEP 196608:Evlvi/qn/B1VfmmpLcHg6KL6qw5Z+K+Zrz/B3t:Etv4qn/B15tSzEg+hb
- TLSH T13B86F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-08_6344e49848d045dbcea3266bb7e2c13f_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_6344e49848d045dbcea3266bb7e2c13f_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260706-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_6344e49848d045dbcea3266bb7e2c13f_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 49dcc66f0f99d102a80cbd0a37a3a1a313a5beab1bae06a5b791bcc054d25212
- MD5 6344e49848d045dbcea3266bb7e2c13f
- SHA1 467fe5962fbdb148659f75253e81c38ecca1e587
- SHA512 724e8073868af31db1525fc9bf0f86c7f8b0b17448e8a6ca6432d4e8566fc769a140a6add0252f713e0af9a32d0d34bd6cb6db1795fba7257cf23dd36090b301
- SSDEEP 196608:Evlvi/qn/B1VfmmpLcHg6KL6qw5Z+K+Zrz/B3t:Etv4qn/B15tSzEg+hb
- TLSH T13B86F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE