General
- Target 2026-07-16_00599d6eaf0ad067f32d36df71723f4d_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample260716-rf4jraa12s
- SHA256 9361dd76feca9b804d8aa6e7670ba36aee978100ff61a76b7b20ae59c1157921
- MD5 00599d6eaf0ad067f32d36df71723f4d
- SHA1 a706ac0a62f1018986dca8b03e76191db063062c
- SHA512 533d40b173727bf111bae03e06175b90c4196076c538f19524513ab01dbaab573147a8cb0bdb1441dba068afcd17469c1c248055ab91dcbcc5847cb5a8e08fdc
- SSDEEP 196608:EPIMi7qn3C1xf3mQLRHyWds2qwoLPK+ZrsOBdt:EQMoqn3C1Nt1xuzPhf
- TLSH T10E86F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798FA0A2B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-16_00599d6eaf0ad067f32d36df71723f4d_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-16_00599d6eaf0ad067f32d36df71723f4d_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-16_00599d6eaf0ad067f32d36df71723f4d_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 9361dd76feca9b804d8aa6e7670ba36aee978100ff61a76b7b20ae59c1157921
- MD5 00599d6eaf0ad067f32d36df71723f4d
- SHA1 a706ac0a62f1018986dca8b03e76191db063062c
- SHA512 533d40b173727bf111bae03e06175b90c4196076c538f19524513ab01dbaab573147a8cb0bdb1441dba068afcd17469c1c248055ab91dcbcc5847cb5a8e08fdc
- SSDEEP 196608:EPIMi7qn3C1xf3mQLRHyWds2qwoLPK+ZrsOBdt:EQMoqn3C1Nt1xuzPhf
- TLSH T10E86F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798FA0A2B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE