General
- Target 2026-07-08_fbf0a05b6081d1710fcb137b89460c54_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample260708-m381jafv7n
- SHA256 2f0a542c8f65359cf0cad8838d9b36b3c0bc522a0ed6e369ddbe7fb534dd8720
- MD5 fbf0a05b6081d1710fcb137b89460c54
- SHA1 526f20c3267ce76608724b27107a126e2f73836e
- SHA512 47175cd2d69e9c22d99d80830b453b57cf98f71a768fed3061b0fe8243b2f404959e731e7da58a4cb76da47a2b56c11db2a1911dd800928f8670368e1f26f007
- SSDEEP 196608:/PBviWqn/y15fhmpLWHgWKTDqw7L5K+ZcY/Bxt:/JvFqn/y1F+UX8H5KK
- TLSH T18886F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-08_fbf0a05b6081d1710fcb137b89460c54_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_fbf0a05b6081d1710fcb137b89460c54_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260706-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_fbf0a05b6081d1710fcb137b89460c54_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 2f0a542c8f65359cf0cad8838d9b36b3c0bc522a0ed6e369ddbe7fb534dd8720
- MD5 fbf0a05b6081d1710fcb137b89460c54
- SHA1 526f20c3267ce76608724b27107a126e2f73836e
- SHA512 47175cd2d69e9c22d99d80830b453b57cf98f71a768fed3061b0fe8243b2f404959e731e7da58a4cb76da47a2b56c11db2a1911dd800928f8670368e1f26f007
- SSDEEP 196608:/PBviWqn/y15fhmpLWHgWKTDqw7L5K+ZcY/Bxt:/JvFqn/y1F+UX8H5KK
- TLSH T18886F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE