General
- Target 2026-07-09_3b2d6d09aed2154758bce71b6a8b60c1_agent-tesla_amadey_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_luca-stealer_njrat_ramnit_smoke-loader_stealc_vidar_wannacry
- Size 15.7MB
- Sample260709-1c1hcsaz71
- SHA256 e9a4a10842922588e64a01cad8648cfc459fbe851284d89fd172a46986f6c58e
- MD5 3b2d6d09aed2154758bce71b6a8b60c1
- SHA1 fa341e960286a9ea02702309d68456ccd3ffde9f
- SHA512 cf08e636b88e51000b4e46089ca7ecbe86f7334b165a6c2fb3ee86f9cd4aacccfd61639611892ade3c7cf12e8925088a7f4492da766ab708ff1a66bbec24fcd4
- SSDEEP 393216:pbn7d3Nv4Mn/R1FtuXEXTMvS6XG2N3Js+:9p32M/LbuXA16XG2VZ
- TLSH T195F6F122EAA01FA5F833813407A69566D63A7C3A172047CF7348FA5A3F736D1543E71A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-09_3b2d6d09aed2154758bce71b6a8b60c1_agent-tesla_amadey_cobalt-strike_coinminer_cryptbot_elex.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_3b2d6d09aed2154758bce71b6a8b60c1_agent-tesla_amadey_cobalt-strike_coinminer_cryptbot_elex.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_3b2d6d09aed2154758bce71b6a8b60c1_agent-tesla_amadey_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_luca-stealer_njrat_ramnit_smoke-loader_stealc_vidar_wannacry
- Size 15.7MB
- SHA256 e9a4a10842922588e64a01cad8648cfc459fbe851284d89fd172a46986f6c58e
- MD5 3b2d6d09aed2154758bce71b6a8b60c1
- SHA1 fa341e960286a9ea02702309d68456ccd3ffde9f
- SHA512 cf08e636b88e51000b4e46089ca7ecbe86f7334b165a6c2fb3ee86f9cd4aacccfd61639611892ade3c7cf12e8925088a7f4492da766ab708ff1a66bbec24fcd4
- SSDEEP 393216:pbn7d3Nv4Mn/R1FtuXEXTMvS6XG2N3Js+:9p32M/LbuXA16XG2VZ
- TLSH T195F6F122EAA01FA5F833813407A69566D63A7C3A172047CF7348FA5A3F736D1543E71A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE