General
- Target 2026-07-14_8cb481291f38999c2aca2006a2f29975_agent-tesla_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample260714-t71naagy2n
- SHA256 e0c3d20d80938e3c1fb0deb4567fc8f93e1cb69ffdfc3b3d5b45612b493a5c2a
- MD5 8cb481291f38999c2aca2006a2f29975
- SHA1 84604fe643122163b0ffa8fde582576301defcd1
- SHA512 17a3f6205e132376379612a207161ca76756f24bb23d0242f40510054dd78b4cf074a4c551361999fe9632ad407ba226a78ac9fc8fe7867772edaac037ed4dec
- SSDEEP 196608:EPevi/Mn/R15fmmpLIHgWKL6gw5LYK+ZrO0B3t:Emv4Mn/R1Ft2XEoYh7
- TLSH T15E86F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A2B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-14_8cb481291f38999c2aca2006a2f29975_agent-tesla_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_8cb481291f38999c2aca2006a2f29975_agent-tesla_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_8cb481291f38999c2aca2006a2f29975_agent-tesla_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 e0c3d20d80938e3c1fb0deb4567fc8f93e1cb69ffdfc3b3d5b45612b493a5c2a
- MD5 8cb481291f38999c2aca2006a2f29975
- SHA1 84604fe643122163b0ffa8fde582576301defcd1
- SHA512 17a3f6205e132376379612a207161ca76756f24bb23d0242f40510054dd78b4cf074a4c551361999fe9632ad407ba226a78ac9fc8fe7867772edaac037ed4dec
- SSDEEP 196608:EPevi/Mn/R15fmmpLIHgWKL6gw5LYK+ZrO0B3t:Emv4Mn/R1Ft2XEoYh7
- TLSH T15E86F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A2B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE