General
- Target 2026-07-11_b805c77f7e9de519f67da9f42cff84d4_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample260711-swwdrady5k
- SHA256 bc7a1672a97c9564a9455ce5986a1d8d21fd9e04d12c9b3668fb1cabea391668
- MD5 b805c77f7e9de519f67da9f42cff84d4
- SHA1 5ee4db69251b14946a962b7326f3311bee81aca6
- SHA512 4a7830ffce8d9805d61878381a41b73936fc74094c431f11d36a059062f8240b5c937d8918c5319ee008ba4aa844f00455cf9ea4ded7a3d63cfba5249fb28b50
- SSDEEP 196608:EP0vt/Mn/Aj6fmmpLqHkWKLxqwkLYK+ZrXcB3t:E8vNMn/AjYtozEeYhs
- TLSH T11386F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798FA0A2B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-11_b805c77f7e9de519f67da9f42cff84d4_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-11_b805c77f7e9de519f67da9f42cff84d4_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_b805c77f7e9de519f67da9f42cff84d4_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 bc7a1672a97c9564a9455ce5986a1d8d21fd9e04d12c9b3668fb1cabea391668
- MD5 b805c77f7e9de519f67da9f42cff84d4
- SHA1 5ee4db69251b14946a962b7326f3311bee81aca6
- SHA512 4a7830ffce8d9805d61878381a41b73936fc74094c431f11d36a059062f8240b5c937d8918c5319ee008ba4aa844f00455cf9ea4ded7a3d63cfba5249fb28b50
- SSDEEP 196608:EP0vt/Mn/Aj6fmmpLqHkWKLxqwkLYK+ZrXcB3t:E8vNMn/AjYtozEeYhs
- TLSH T11386F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798FA0A2B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects KawaiiUnicorn
- Custom signature
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE