General
- Target 2026-07-14_487327195af0dcf704f78ec495c33143_agent-tesla_amadey_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_luca-stealer_njrat_ramnit_smoke-loader_stealc_vidar_wannacry
- Size 15.7MB
- Sample260714-hsrahsax5v
- SHA256 2fcbdad58e2617861c630e256572aba9c5721a97df99868cfc3c751795ced9ac
- MD5 487327195af0dcf704f78ec495c33143
- SHA1 6178d90dabdb9878c4f1cf8e036bae5f59bfa0b2
- SHA512 cfe7e61a58ba5c4f642f4de7443f397e9e55f63f6eb92b62b8747f07feb1da3c18b27af26f796203244b7c31503965ab526f69238f67d736591df73f0db22c07
- SSDEEP 393216:Lbn7L78v4Mn/R1FtZZE+Th3r6Jb2N6Js+:v/7ZM/LbZZ1V6Jb2kZ
- TLSH T150F6F122EAA01FA5F833813407A69566D63A7C3A172047CF7348FA5A3F736D1543E71A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-14_487327195af0dcf704f78ec495c33143_agent-tesla_amadey_cobalt-strike_coinminer_cryptbot_elex.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_487327195af0dcf704f78ec495c33143_agent-tesla_amadey_cobalt-strike_coinminer_cryptbot_elex.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_487327195af0dcf704f78ec495c33143_agent-tesla_amadey_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_luca-stealer_njrat_ramnit_smoke-loader_stealc_vidar_wannacry
- Size 15.7MB
- SHA256 2fcbdad58e2617861c630e256572aba9c5721a97df99868cfc3c751795ced9ac
- MD5 487327195af0dcf704f78ec495c33143
- SHA1 6178d90dabdb9878c4f1cf8e036bae5f59bfa0b2
- SHA512 cfe7e61a58ba5c4f642f4de7443f397e9e55f63f6eb92b62b8747f07feb1da3c18b27af26f796203244b7c31503965ab526f69238f67d736591df73f0db22c07
- SSDEEP 393216:Lbn7L78v4Mn/R1FtZZE+Th3r6Jb2N6Js+:v/7ZM/LbZZ1V6Jb2kZ
- TLSH T150F6F122EAA01FA5F833813407A69566D63A7C3A172047CF7348FA5A3F736D1543E71A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE