General
- Target 2026-07-09_457b9d9e8fe3046995361144c7968ca8_agent-tesla_amadey_cobalt-strike_coinminer_cryptbot_darkgate_elex_gcleaner_glassworm_icedid_loki-bot_luca-stealer_njrat_ramnit_smoke-loader_stealc_vidar_wannacry
- Size 26.4MB
- Sample260709-x88bashw9y
- SHA256 03eff84fb1a64907fd22342e4df2d6e1caf7d67e16686a56fe1b1d6be237ea16
- MD5 457b9d9e8fe3046995361144c7968ca8
- SHA1 769614ad25b3d680d35673d9bf9da97799d1c187
- SHA512 f60337a3156b9be10c5c4ac0aa448aeaa8befe4f875883f1f3cd5519d119470bb41986b7318d7640b6a79d3d1668931ee204f742e7f1ddb027df0595bdfa464a
- SSDEEP 393216:bJsQII3kG5t+RNSG/lVCABOJEKUxqnv/bntd78v4Mn/R1FtnXE9ThPr6J+2Ny:bQqku+3RItUxgvTj7ZM/LbnXmJ6J+2M
- TLSH T12957E0B2997016A1FE3A4834CEA2AA65C9357C191F60CBCF2644B18F6B736F3543D385
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-09_457b9d9e8fe3046995361144c7968ca8_agent-tesla_amadey_cobalt-strike_coinminer_cryptbot_dark.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_457b9d9e8fe3046995361144c7968ca8_agent-tesla_amadey_cobalt-strike_coinminer_cryptbot_dark.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_457b9d9e8fe3046995361144c7968ca8_agent-tesla_amadey_cobalt-strike_coinminer_cryptbot_darkgate_elex_gcleaner_glassworm_icedid_loki-bot_luca-stealer_njrat_ramnit_smoke-loader_stealc_vidar_wannacry
- Size 26.4MB
- SHA256 03eff84fb1a64907fd22342e4df2d6e1caf7d67e16686a56fe1b1d6be237ea16
- MD5 457b9d9e8fe3046995361144c7968ca8
- SHA1 769614ad25b3d680d35673d9bf9da97799d1c187
- SHA512 f60337a3156b9be10c5c4ac0aa448aeaa8befe4f875883f1f3cd5519d119470bb41986b7318d7640b6a79d3d1668931ee204f742e7f1ddb027df0595bdfa464a
- SSDEEP 393216:bJsQII3kG5t+RNSG/lVCABOJEKUxqnv/bntd78v4Mn/R1FtnXE9ThPr6J+2Ny:bQqku+3RItUxgvTj7ZM/LbnXmJ6J+2M
- TLSH T12957E0B2997016A1FE3A4834CEA2AA65C9357C191F60CBCF2644B18F6B736F3543D385
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables containing possible sandbox analysis VM usernames
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE