General
- Target 2026-07-10_ef951d850a12756b300e4e26280d5a7c_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 12.8MB
- Sample260710-ng5xesbt5t
- SHA256 1a6afd7bb5d9940a90684f228291a316f55737bc9b7a8d316211756779207738
- MD5 ef951d850a12756b300e4e26280d5a7c
- SHA1 2a85667f9cd6563f9412879fecf07ad05e64212d
- SHA512 5ed010b52219cc7213520e02341815479e68216c4ef4931f1903902a4cce2cca653a87c7497832f5df4d5f411f54903c660f4bb7071dfa71b84bf2d98f389dc5
- SSDEEP 393216:fJEKUxqnUhbnvM+8v4qn/q1FtFk8gqqX:ftUxgUlk+Zq/WbFk7
- TLSH T132D6F1269AA01F95F833413403A68952D92E7C3E636047CF779CFA4A3BB36D1147E61E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-10_ef951d850a12756b300e4e26280d5a7c_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_ef951d850a12756b300e4e26280d5a7c_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_ef951d850a12756b300e4e26280d5a7c_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 12.8MB
- SHA256 1a6afd7bb5d9940a90684f228291a316f55737bc9b7a8d316211756779207738
- MD5 ef951d850a12756b300e4e26280d5a7c
- SHA1 2a85667f9cd6563f9412879fecf07ad05e64212d
- SHA512 5ed010b52219cc7213520e02341815479e68216c4ef4931f1903902a4cce2cca653a87c7497832f5df4d5f411f54903c660f4bb7071dfa71b84bf2d98f389dc5
- SSDEEP 393216:fJEKUxqnUhbnvM+8v4qn/q1FtFk8gqqX:ftUxgUlk+Zq/WbFk7
- TLSH T132D6F1269AA01F95F833413403A68952D92E7C3E636047CF779CFA4A3BB36D1147E61E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE