General
- Target 2026-07-17_c504ef162beeee13c81f2ee3f55fb8e5_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample260718-cmgagacz4j
- SHA256 168f672d92609203d48005587b8af28cd2cb08a14e76350ddf46bfd860d78b61
- MD5 c504ef162beeee13c81f2ee3f55fb8e5
- SHA1 844d14422247494c26d6912a97a0f075ead7e947
- SHA512 3146142f1fcaaec39d0c48436847553e8ddc6c424e7e30813981f350926267f95b4ae9af6e206b16ed1f7ac6a50603af7bcd39c64d540bbbed1749e1963ba045
- SSDEEP 196608:EP0vi/7n/R1rfmm6LXHgWKL6qwlL2K+ZrXcBwt:E8v47n/R1bebXEi2hs
- TLSH T15086F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-17_c504ef162beeee13c81f2ee3f55fb8e5_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_c504ef162beeee13c81f2ee3f55fb8e5_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_c504ef162beeee13c81f2ee3f55fb8e5_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 168f672d92609203d48005587b8af28cd2cb08a14e76350ddf46bfd860d78b61
- MD5 c504ef162beeee13c81f2ee3f55fb8e5
- SHA1 844d14422247494c26d6912a97a0f075ead7e947
- SHA512 3146142f1fcaaec39d0c48436847553e8ddc6c424e7e30813981f350926267f95b4ae9af6e206b16ed1f7ac6a50603af7bcd39c64d540bbbed1749e1963ba045
- SSDEEP 196608:EP0vi/7n/R1rfmm6LXHgWKL6qwlL2K+ZrXcBwt:E8v47n/R1bebXEi2hs
- TLSH T15086F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE