General
- Target 2026-07-09_e36ee408dc10bc7f1ffa3b61224f533e_agent-tesla_amadey_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_luca-stealer_njrat_ramnit_smoke-loader_stealc_vidar_wannacry
- Size 15.7MB
- Sample260709-tqfa1sds7n
- SHA256 7482ac69f1a8691403bb91c257bbbb0b9679bf9cf73ae95ad55e8a810a2445c6
- MD5 e36ee408dc10bc7f1ffa3b61224f533e
- SHA1 50f97daee825b5c14c1a1312e80cbcd4d9c3edf3
- SHA512 6398440cea3c524267ee4919cdced29d08767440885ace393c5a832cad7bf2d6a0e09d05d74cf6d851d93faf7965bc01b0800ddcb327e60e0f2ac44aa0b8ae69
- SSDEEP 393216:pQn3d38v4Mn/R1FtnXEOThvr6Jk2NwJs+:wN3ZM/LbnXFt6Jk22Z
- TLSH T1EDF6F122EAA01FA5F833813407A69566D63A7C3A172047CF7348FA5A3F736D1543E71A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-09_e36ee408dc10bc7f1ffa3b61224f533e_agent-tesla_amadey_cobalt-strike_coinminer_cryptbot_elex.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_e36ee408dc10bc7f1ffa3b61224f533e_agent-tesla_amadey_cobalt-strike_coinminer_cryptbot_elex.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_e36ee408dc10bc7f1ffa3b61224f533e_agent-tesla_amadey_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_luca-stealer_njrat_ramnit_smoke-loader_stealc_vidar_wannacry
- Size 15.7MB
- SHA256 7482ac69f1a8691403bb91c257bbbb0b9679bf9cf73ae95ad55e8a810a2445c6
- MD5 e36ee408dc10bc7f1ffa3b61224f533e
- SHA1 50f97daee825b5c14c1a1312e80cbcd4d9c3edf3
- SHA512 6398440cea3c524267ee4919cdced29d08767440885ace393c5a832cad7bf2d6a0e09d05d74cf6d851d93faf7965bc01b0800ddcb327e60e0f2ac44aa0b8ae69
- SSDEEP 393216:pQn3d38v4Mn/R1FtnXEOThvr6Jk2NwJs+:wN3ZM/LbnXFt6Jk22Z
- TLSH T1EDF6F122EAA01FA5F833813407A69566D63A7C3A172047CF7348FA5A3F736D1543E71A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE