General
- Target 2026-07-09_fc4b12a582c4d239999d269fd4827fa2_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample260710-aalcjsaz2m
- SHA256 b021110800944066c3cf84fff949efe2925c6ae8f1b0f675e0421f4f6ea37156
- MD5 fc4b12a582c4d239999d269fd4827fa2
- SHA1 4529ddadb627bc4834f3e1843f9d1c9365e2b7d7
- SHA512 409097beeb2e8ee3f6d1562284c0a530709fe351271130e5a4708c8e4b3651fb7636e4ad60579affa80c0b4a1b2bd9771323a1ad2c944f6ab4d9ee4a6d598504
- SSDEEP 196608:EP0vu/qn/B15fmmpLDHgWKL6q05L+KXZpXhB3t:E8vsqn/B1FtnXEi+yx
- TLSH T13286F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-09_fc4b12a582c4d239999d269fd4827fa2_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_fc4b12a582c4d239999d269fd4827fa2_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_fc4b12a582c4d239999d269fd4827fa2_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 b021110800944066c3cf84fff949efe2925c6ae8f1b0f675e0421f4f6ea37156
- MD5 fc4b12a582c4d239999d269fd4827fa2
- SHA1 4529ddadb627bc4834f3e1843f9d1c9365e2b7d7
- SHA512 409097beeb2e8ee3f6d1562284c0a530709fe351271130e5a4708c8e4b3651fb7636e4ad60579affa80c0b4a1b2bd9771323a1ad2c944f6ab4d9ee4a6d598504
- SSDEEP 196608:EP0vu/qn/B15fmmpLDHgWKL6q05L+KXZpXhB3t:E8vsqn/B1FtnXEi+yx
- TLSH T13286F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE