General
- Target 2026-07-15_4269553709dfd525e77a3005099f37d2_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample260716-cevg5aaz6q
- SHA256 5beb70e2527c65fdad6f20815aed8bbeb8d1546e91b2a63c7263b12bd395f840
- MD5 4269553709dfd525e77a3005099f37d2
- SHA1 e5b5faeaaff30a7bfe098eaee1caee59052b8e87
- SHA512 913771c6977367b37d9875f6e93734d5e960df2e4cc0854dad4c15b028efccb3ce13b369c841c86934790aa00dc8ee5e8fbfac6c5ab21053cab1678b9d1c546f
- SSDEEP 196608:EPnMijqn/s15fmmKL0HyWKseqwSLTK+ZssCB4t:EPMcqn/s1F+yxTZTmH
- TLSH T1EA86F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A2B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-15_4269553709dfd525e77a3005099f37d2_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_4269553709dfd525e77a3005099f37d2_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_4269553709dfd525e77a3005099f37d2_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 5beb70e2527c65fdad6f20815aed8bbeb8d1546e91b2a63c7263b12bd395f840
- MD5 4269553709dfd525e77a3005099f37d2
- SHA1 e5b5faeaaff30a7bfe098eaee1caee59052b8e87
- SHA512 913771c6977367b37d9875f6e93734d5e960df2e4cc0854dad4c15b028efccb3ce13b369c841c86934790aa00dc8ee5e8fbfac6c5ab21053cab1678b9d1c546f
- SSDEEP 196608:EPnMijqn/s15fmmKL0HyWKseqwSLTK+ZssCB4t:EPMcqn/s1F+yxTZTmH
- TLSH T1EA86F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A2B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE