General
- Target 2026-07-16_eb0fe247b8cfe035d9fffae598a48505_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample260716-ey155acy6l
- SHA256 c7431925b810c8c9043d5f6eba1a5cf92fb2a06fab6c4f392da56cf542dc944a
- MD5 eb0fe247b8cfe035d9fffae598a48505
- SHA1 9260d506e849cc238db5cc6e61411f4e862c704b
- SHA512 b255bdb5e670a9f7bb1ae3e99422945ebdee72456149875740a1fa35332dc589850d9b222c35ff300fe28e7a39500eef84d8444066802ffc3fbc42104c4b64ef
- SSDEEP 196608:EP0vi/Mn/Z1RfmmsLRHgWKL6swJLYK+ZrX+B3t:E8v4Mn/Z1tAtXEkYhu
- TLSH T16986F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-16_eb0fe247b8cfe035d9fffae598a48505_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-16_eb0fe247b8cfe035d9fffae598a48505_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-16_eb0fe247b8cfe035d9fffae598a48505_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 c7431925b810c8c9043d5f6eba1a5cf92fb2a06fab6c4f392da56cf542dc944a
- MD5 eb0fe247b8cfe035d9fffae598a48505
- SHA1 9260d506e849cc238db5cc6e61411f4e862c704b
- SHA512 b255bdb5e670a9f7bb1ae3e99422945ebdee72456149875740a1fa35332dc589850d9b222c35ff300fe28e7a39500eef84d8444066802ffc3fbc42104c4b64ef
- SSDEEP 196608:EP0vi/Mn/Z1RfmmsLRHgWKL6swJLYK+ZrX+B3t:E8v4Mn/Z1tAtXEkYhu
- TLSH T16986F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE