General
- Target 2026-07-17_03b816c20f6bdb8f2ceea29a7a629bfc_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample260717-hkm8wsdv2n
- SHA256 435869881127bcf60988bb485096f3384db04b5afdf26a2451f1514e74fc77ae
- MD5 03b816c20f6bdb8f2ceea29a7a629bfc
- SHA1 5feb441f6a29887544917a988d8578936e6a6c12
- SHA512 366986d56efc2828f25e9459bae2094fd01b38d4b10e94de697c6cfaa5360ecaeaa388a293fb0eaf770112b32ddbf1f32fac292731a34bff61d84903b02109e0
- SSDEEP 196608:EPPviR1n/W15fmmpLYHh7KhUqwULYK+ZtYiBQt:Env61n/W1FtWB+5Y/H
- TLSH T1CA86F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798FA0A2B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-17_03b816c20f6bdb8f2ceea29a7a629bfc_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_03b816c20f6bdb8f2ceea29a7a629bfc_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_03b816c20f6bdb8f2ceea29a7a629bfc_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 435869881127bcf60988bb485096f3384db04b5afdf26a2451f1514e74fc77ae
- MD5 03b816c20f6bdb8f2ceea29a7a629bfc
- SHA1 5feb441f6a29887544917a988d8578936e6a6c12
- SHA512 366986d56efc2828f25e9459bae2094fd01b38d4b10e94de697c6cfaa5360ecaeaa388a293fb0eaf770112b32ddbf1f32fac292731a34bff61d84903b02109e0
- SSDEEP 196608:EPPviR1n/W15fmmpLYHh7KhUqwULYK+ZtYiBQt:Env61n/W1FtWB+5Y/H
- TLSH T1CA86F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798FA0A2B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects KawaiiUnicorn
- Custom signature
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE