General
- Target 2026-07-08_c6a414415f4e6a936c05c16c93e1e3e0_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample260708-vfas8ad141
- SHA256 774149c2e32e4a0dcba309901af45c27acb3e3faa89bab85c6af70f0ac4ffda1
- MD5 c6a414415f4e6a936c05c16c93e1e3e0
- SHA1 dc2b917391d63835352b6c6ba9e9d0dcf90d44e5
- SHA512 3813940274e6440099e8b3151d6612f9e6098e8eb2f57d83d7d9c1ec6f68899459225dddbc59610770bbaedad2ff1be868fbdabbb683ad0d5655a93c21db8af6
- SSDEEP 196608:EP0vi/qn/B15fmmpLDHgWKL3hw5L+K+ZrX/83t:E8v4qn/B1FtnXEC+hv
- TLSH T14586F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-08_c6a414415f4e6a936c05c16c93e1e3e0_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_c6a414415f4e6a936c05c16c93e1e3e0_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260706-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_c6a414415f4e6a936c05c16c93e1e3e0_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 774149c2e32e4a0dcba309901af45c27acb3e3faa89bab85c6af70f0ac4ffda1
- MD5 c6a414415f4e6a936c05c16c93e1e3e0
- SHA1 dc2b917391d63835352b6c6ba9e9d0dcf90d44e5
- SHA512 3813940274e6440099e8b3151d6612f9e6098e8eb2f57d83d7d9c1ec6f68899459225dddbc59610770bbaedad2ff1be868fbdabbb683ad0d5655a93c21db8af6
- SSDEEP 196608:EP0vi/qn/B15fmmpLDHgWKL3hw5L+K+ZrX/83t:E8v4qn/B1FtnXEC+hv
- TLSH T14586F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE