General
- Target 2026-07-14_32062b29f09eaf74a78b4b1b1b2bc7e5_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample260714-2fldaag13v
- SHA256 7b14d2e3c833b89386cb80bd3a9976b04d7acabd1de9688893139bcc7b4d78cf
- MD5 32062b29f09eaf74a78b4b1b1b2bc7e5
- SHA1 58f3c7497d2b2bd43469bde5b729fac91a9c1739
- SHA512 50a54ed35e98cef5b6c421e20465b27031b50f8d3fa50d6a5818e2391dfb33fef2a6f9574b83bad47e6aa58df4a21e8ac69ddc1d37c2acd55608b3534bdbab8f
- SSDEEP 196608:EP0vi/Xn/R15fmmpLGHgWKLcqwlL2K+ZrXcBwn:E8v4Xn/R1FtcXE82hs
- TLSH T18E86F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-14_32062b29f09eaf74a78b4b1b1b2bc7e5_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_32062b29f09eaf74a78b4b1b1b2bc7e5_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_32062b29f09eaf74a78b4b1b1b2bc7e5_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 7b14d2e3c833b89386cb80bd3a9976b04d7acabd1de9688893139bcc7b4d78cf
- MD5 32062b29f09eaf74a78b4b1b1b2bc7e5
- SHA1 58f3c7497d2b2bd43469bde5b729fac91a9c1739
- SHA512 50a54ed35e98cef5b6c421e20465b27031b50f8d3fa50d6a5818e2391dfb33fef2a6f9574b83bad47e6aa58df4a21e8ac69ddc1d37c2acd55608b3534bdbab8f
- SSDEEP 196608:EP0vi/Xn/R15fmmpLGHgWKLcqwlL2K+ZrXcBwn:E8v4Xn/R1FtcXE82hs
- TLSH T18E86F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE