General
- Target 2026-07-13_03802de5fe4a26ec51038e2f77d0d5f5_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_luca-stealer_njrat_ramnit_stealc_vidar
- Size 9.2MB
- Sample260713-3e2vbacy31
- SHA256 ac2fbb8606deacaa73a4bafeb24e302fb6b59769dd0b961dce2e1496064663a1
- MD5 03802de5fe4a26ec51038e2f77d0d5f5
- SHA1 68882eb4f37424906dd27de91c58d9367b305761
- SHA512 601658109f055983d89693648bbacbd2a644b34e00d8ff487506fa41b11462999ac3b7f9898ea1a741b8046a553179b10b7b9ef239f2ffef8b70ded9d431fbc0
- SSDEEP 196608:EP0vi/Mn/R15fmmI15HgAKL3qwRLTK+vrscBKtTdgn5ZjBxcO4:E8v4Mn/R1FsjFElTrBs6J
- TLSH T104A6F139E9A01EE0F533A2344652D562D165BC3E63208BCF2798F90A3B336E1657F716
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-13_03802de5fe4a26ec51038e2f77d0d5f5_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-13_03802de5fe4a26ec51038e2f77d0d5f5_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-13_03802de5fe4a26ec51038e2f77d0d5f5_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_luca-stealer_njrat_ramnit_stealc_vidar
- Size 9.2MB
- SHA256 ac2fbb8606deacaa73a4bafeb24e302fb6b59769dd0b961dce2e1496064663a1
- MD5 03802de5fe4a26ec51038e2f77d0d5f5
- SHA1 68882eb4f37424906dd27de91c58d9367b305761
- SHA512 601658109f055983d89693648bbacbd2a644b34e00d8ff487506fa41b11462999ac3b7f9898ea1a741b8046a553179b10b7b9ef239f2ffef8b70ded9d431fbc0
- SSDEEP 196608:EP0vi/Mn/R15fmmI15HgAKL3qwRLTK+vrscBKtTdgn5ZjBxcO4:E8v4Mn/R1FsjFElTrBs6J
- TLSH T104A6F139E9A01EE0F533A2344652D562D165BC3E63208BCF2798F90A3B336E1657F716
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE