General
- Target 2026-07-09_6e62cc9bff4e1f16da9c77d46b51043c_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample260709-kdh2pse18p
- SHA256 73e92e83bdc342f32c728906986d3fbcf42f0292a4c653b9f84fc0a1977d3949
- MD5 6e62cc9bff4e1f16da9c77d46b51043c
- SHA1 9047bcbb7e6ecee43cc596221bc107afef9abaf7
- SHA512 2c7f15b8c4ac646960a9e4cc593a5cf772d461766b4f5c5be4973768659c07176771f25030ca3eaf0c9b13cc4dcc38aab7539d09e02c2c9a52b18666abe19711
- SSDEEP 196608:/P0viWqn/R13fhmpLeHgWKTHqw7L+K+ZcY/B3t:/8vFqn/R1v+EX87+KK
- TLSH T10986F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-09_6e62cc9bff4e1f16da9c77d46b51043c_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_6e62cc9bff4e1f16da9c77d46b51043c_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260706-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_6e62cc9bff4e1f16da9c77d46b51043c_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 73e92e83bdc342f32c728906986d3fbcf42f0292a4c653b9f84fc0a1977d3949
- MD5 6e62cc9bff4e1f16da9c77d46b51043c
- SHA1 9047bcbb7e6ecee43cc596221bc107afef9abaf7
- SHA512 2c7f15b8c4ac646960a9e4cc593a5cf772d461766b4f5c5be4973768659c07176771f25030ca3eaf0c9b13cc4dcc38aab7539d09e02c2c9a52b18666abe19711
- SSDEEP 196608:/P0viWqn/R13fhmpLeHgWKTHqw7L+K+ZcY/B3t:/8vFqn/R1v+EX87+KK
- TLSH T10986F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE