General
- Target 2026-07-14_bf3cf4217cbeb3bd5ac0bfb2d8570edc_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample260714-dmg3faft2w
- SHA256 ab5b249fa87ee128bcabd28c3b21a42a293f376b627d872d4bf856d868ec878e
- MD5 bf3cf4217cbeb3bd5ac0bfb2d8570edc
- SHA1 e0648b44fc8d47cfca65f20876dabc6b62bad437
- SHA512 7396cbb9eb33ac987ee2940acad38dd01ced80da034f21d03685657edb6d3b7bcbe61e81f2b07fae1296fbf108745f34c4ea189a224234e38b9caa6906ab2432
- SSDEEP 196608:EP9vi/qn/R15fmmDLdHgWKL6yw5LiK+ZrXctpt:EFv4qn/R1FfhXE2ihs
- TLSH T15286F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A2B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-14_bf3cf4217cbeb3bd5ac0bfb2d8570edc_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_bf3cf4217cbeb3bd5ac0bfb2d8570edc_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_bf3cf4217cbeb3bd5ac0bfb2d8570edc_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 ab5b249fa87ee128bcabd28c3b21a42a293f376b627d872d4bf856d868ec878e
- MD5 bf3cf4217cbeb3bd5ac0bfb2d8570edc
- SHA1 e0648b44fc8d47cfca65f20876dabc6b62bad437
- SHA512 7396cbb9eb33ac987ee2940acad38dd01ced80da034f21d03685657edb6d3b7bcbe61e81f2b07fae1296fbf108745f34c4ea189a224234e38b9caa6906ab2432
- SSDEEP 196608:EP9vi/qn/R15fmmDLdHgWKL6yw5LiK+ZrXctpt:EFv4qn/R1FfhXE2ihs
- TLSH T15286F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A2B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE