General
- Target 2026-07-16_af859467677ab84467dbfd1e581b4540_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 10.8MB
- Sample260716-e17exscz4l
- SHA256 2b26a20c15cffeed746814f3cb9121969c14a2556f1de293248c2c71a14feddb
- MD5 af859467677ab84467dbfd1e581b4540
- SHA1 b1f85c7944ec1cf6f28eec9d785b3cf6a0c5101a
- SHA512 c86d2fca3a4663cf75f4e7722a5b52a064bec4c320999ceda50ea1d2b20d77aa3b7b79c1c57137f8f29b1e87236a14c9b04050a016f1c04742e7d27c1f726e58
- SSDEEP 196608:7NbnLDXdppqMP0vi/Mn/R1RfmmsLRHg2KL6swJLYK+ZrX+B3t:pbnnd78v4Mn/R1tAt3EkYhu
- TLSH T1FFB6F1369AA01F95F833913403A6C552DA2E7C3A632047CF779CF64A2BB32D1547E61E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-16_af859467677ab84467dbfd1e581b4540_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-16_af859467677ab84467dbfd1e581b4540_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-16_af859467677ab84467dbfd1e581b4540_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 10.8MB
- SHA256 2b26a20c15cffeed746814f3cb9121969c14a2556f1de293248c2c71a14feddb
- MD5 af859467677ab84467dbfd1e581b4540
- SHA1 b1f85c7944ec1cf6f28eec9d785b3cf6a0c5101a
- SHA512 c86d2fca3a4663cf75f4e7722a5b52a064bec4c320999ceda50ea1d2b20d77aa3b7b79c1c57137f8f29b1e87236a14c9b04050a016f1c04742e7d27c1f726e58
- SSDEEP 196608:7NbnLDXdppqMP0vi/Mn/R1RfmmsLRHg2KL6swJLYK+ZrX+B3t:pbnnd78v4Mn/R1tAt3EkYhu
- TLSH T1FFB6F1369AA01F95F833913403A6C552DA2E7C3A632047CF779CF64A2BB32D1547E61E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects KawaiiUnicorn
- Custom signature
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE