General
- Target 2026-07-09_67856a4574669e4275c35f0286d70ad5_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample260710-aflv9sa12r
- SHA256 a2bbd4b1b4585e2acae5b51a1efc18cb04a73cf126d1635abc89bde72aaa6974
- MD5 67856a4574669e4275c35f0286d70ad5
- SHA1 7011c02b41c8df2ba14f050c84bf459020282587
- SHA512 cf8f002b4361fed409efd2c29ed18641bece91b4b00ac0e11c39aab9777014084a999b1cca008584a3ce7ed3d2a0670f7da03fd56bf4e67953c9f8b0c78294b2
- SSDEEP 196608:/P6viXqn/y1mfBmULMHgWKTOqDfL+K+ZcY/BEd:/Cvoqn/y1sXaX8p+KK
- TLSH T18F86F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A2B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-09_67856a4574669e4275c35f0286d70ad5_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_67856a4574669e4275c35f0286d70ad5_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_67856a4574669e4275c35f0286d70ad5_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 a2bbd4b1b4585e2acae5b51a1efc18cb04a73cf126d1635abc89bde72aaa6974
- MD5 67856a4574669e4275c35f0286d70ad5
- SHA1 7011c02b41c8df2ba14f050c84bf459020282587
- SHA512 cf8f002b4361fed409efd2c29ed18641bece91b4b00ac0e11c39aab9777014084a999b1cca008584a3ce7ed3d2a0670f7da03fd56bf4e67953c9f8b0c78294b2
- SSDEEP 196608:/P6viXqn/y1mfBmULMHgWKTOqDfL+K+ZcY/BEd:/Cvoqn/y1sXaX8p+KK
- TLSH T18F86F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A2B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE