General
- Target 2026-07-11_6ec804c7de22c406b9fa4e7536d6c312_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample260711-lc4gpafs3j
- SHA256 c95560fe5546181a2ff28993c933613ad7601c8b89c502e52703829349a4c38d
- MD5 6ec804c7de22c406b9fa4e7536d6c312
- SHA1 9fdaebe57adacb1bce725aaddf59c4296e077f3c
- SHA512 f09be004f7b65266c174dcc96a1521d3043b04763326ffe6992d5e7f1a9e56e23ac5da70c5d346fc22148276aad07636f1955406bd7214fccad2d0ac692945d4
- SSDEEP 196608:EPVvi/qu/T15fmmpLDHgWKLHqw7s+K+Zrx/B3t:ENv4qu/T1FtnXE8+hV
- TLSH T17086F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-11_6ec804c7de22c406b9fa4e7536d6c312_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-11_6ec804c7de22c406b9fa4e7536d6c312_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_6ec804c7de22c406b9fa4e7536d6c312_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 c95560fe5546181a2ff28993c933613ad7601c8b89c502e52703829349a4c38d
- MD5 6ec804c7de22c406b9fa4e7536d6c312
- SHA1 9fdaebe57adacb1bce725aaddf59c4296e077f3c
- SHA512 f09be004f7b65266c174dcc96a1521d3043b04763326ffe6992d5e7f1a9e56e23ac5da70c5d346fc22148276aad07636f1955406bd7214fccad2d0ac692945d4
- SSDEEP 196608:EPVvi/qu/T15fmmpLDHgWKLHqw7s+K+Zrx/B3t:ENv4qu/T1FtnXE8+hV
- TLSH T17086F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE