General
- Target 2026-07-08_657b7c5373fef44226dc572abc72b78a_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_luca-stealer_njrat_ramnit_stealc_vidar
- Size 16.2MB
- Sample260708-wddb1aez8x
- SHA256 c5597d061a119fc8aab2a5bcf46c33c47df360c7d8882bbcb37a4e6818b7cff9
- MD5 657b7c5373fef44226dc572abc72b78a
- SHA1 25cd16526259126a331cd75990efff2bf413028f
- SHA512 c8118bcb9b9b8799dca5c16253ea87febce7dcfe07c2a5fa1e2c299b10dfa934fd00f1c8f55d6de740f48cd9bb0dffc79765abacd96b1d30a1dc43ddbfe7dc13
- SSDEEP 393216:/+S+JEKUxqnvQbntd78v4Mn/R1Ft+XEOThs2O:m9tUxgvOj7ZM/Lb+XFHO
- TLSH T15507BEF68C705691FE3A4C34DEA1AA648D357C291F908BCF2905B18B67736F7603D289
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-08_657b7c5373fef44226dc572abc72b78a_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_657b7c5373fef44226dc572abc72b78a_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260706-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_657b7c5373fef44226dc572abc72b78a_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_luca-stealer_njrat_ramnit_stealc_vidar
- Size 16.2MB
- SHA256 c5597d061a119fc8aab2a5bcf46c33c47df360c7d8882bbcb37a4e6818b7cff9
- MD5 657b7c5373fef44226dc572abc72b78a
- SHA1 25cd16526259126a331cd75990efff2bf413028f
- SHA512 c8118bcb9b9b8799dca5c16253ea87febce7dcfe07c2a5fa1e2c299b10dfa934fd00f1c8f55d6de740f48cd9bb0dffc79765abacd96b1d30a1dc43ddbfe7dc13
- SSDEEP 393216:/+S+JEKUxqnvQbntd78v4Mn/R1Ft+XEOThs2O:m9tUxgvOj7ZM/Lb+XFHO
- TLSH T15507BEF68C705691FE3A4C34DEA1AA648D357C291F908BCF2905B18B67736F7603D289
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE