General
- Target 2026-07-09_1b4b1e7d80d2a7d116fe67efdc9b52ca_agent-tesla_cobalt-strike_cryptbot_darkgate_elex_gcleaner_glassworm_icedid_loki-bot_njrat_stealc_vidar
- Size 22.4MB
- Sample260709-yewabagy9k
- SHA256 6c1bcd7c9cdd086a702a47500a59d9d2a22e576d9b824911abf600fff1b17204
- MD5 1b4b1e7d80d2a7d116fe67efdc9b52ca
- SHA1 b9e2bfe5fc8174077abd90ee75544a2d410cd94f
- SHA512 df6e8f000a9b0f6a9999c3d6fc64565b0d7059ddb356e7628dfcf6444b580318a87cc62d9d579e23c75d5583a90661a9e1267bcbcdf94c9f64d58b071b9bda74
- SSDEEP 393216:bJsQII3kG5t+RNSG/lVCABOJEKUxqnv/bntd38v4Mn/R1FtLXE9ThP:bQqku+3RItUxgvTj3ZM/LbLXm
- TLSH T16937E0B689701691FE3A4834CEA2A964CD357C291FA0CBCF2954B18F67736F3543D289
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-09_1b4b1e7d80d2a7d116fe67efdc9b52ca_agent-tesla_cobalt-strike_cryptbot_darkgate_elex_gcleane.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_1b4b1e7d80d2a7d116fe67efdc9b52ca_agent-tesla_cobalt-strike_cryptbot_darkgate_elex_gcleane.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_1b4b1e7d80d2a7d116fe67efdc9b52ca_agent-tesla_cobalt-strike_cryptbot_darkgate_elex_gcleaner_glassworm_icedid_loki-bot_njrat_stealc_vidar
- Size 22.4MB
- SHA256 6c1bcd7c9cdd086a702a47500a59d9d2a22e576d9b824911abf600fff1b17204
- MD5 1b4b1e7d80d2a7d116fe67efdc9b52ca
- SHA1 b9e2bfe5fc8174077abd90ee75544a2d410cd94f
- SHA512 df6e8f000a9b0f6a9999c3d6fc64565b0d7059ddb356e7628dfcf6444b580318a87cc62d9d579e23c75d5583a90661a9e1267bcbcdf94c9f64d58b071b9bda74
- SSDEEP 393216:bJsQII3kG5t+RNSG/lVCABOJEKUxqnv/bntd38v4Mn/R1FtLXE9ThP:bQqku+3RItUxgvTj3ZM/LbLXm
- TLSH T16937E0B689701691FE3A4834CEA2A964CD357C291FA0CBCF2954B18F67736F3543D289
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE