General
- Target 2026-07-17_5e3d967ac956ec04c71e5bfc8184d431_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample260718-d82nzaav9s
- SHA256 ec229699996fa3bbe672528ce25a21610ed7078ad6a9c574029824d76ea48266
- MD5 5e3d967ac956ec04c71e5bfc8184d431
- SHA1 adb475da3f1798ed93d39c8b83f55843fe59faa5
- SHA512 4be3e0be5f3fe55fc5767e630fc2b167df878002318df2bff289c0310fe42ccb6107579ed7fddd8e294f4eea55dd477a876f54bd82bbe0fe36c89f3434aeb94a
- SSDEEP 196608:EZnIijqn/s15fJmpLfHyWKs6qwjLTK+ZNsEB9t:EtIcqn/s1FWTxTkTv5
- TLSH T1A586F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798FA0A2B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-17_5e3d967ac956ec04c71e5bfc8184d431_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_5e3d967ac956ec04c71e5bfc8184d431_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_5e3d967ac956ec04c71e5bfc8184d431_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 ec229699996fa3bbe672528ce25a21610ed7078ad6a9c574029824d76ea48266
- MD5 5e3d967ac956ec04c71e5bfc8184d431
- SHA1 adb475da3f1798ed93d39c8b83f55843fe59faa5
- SHA512 4be3e0be5f3fe55fc5767e630fc2b167df878002318df2bff289c0310fe42ccb6107579ed7fddd8e294f4eea55dd477a876f54bd82bbe0fe36c89f3434aeb94a
- SSDEEP 196608:EZnIijqn/s15fJmpLfHyWKs6qwjLTK+ZNsEB9t:EtIcqn/s1FWTxTkTv5
- TLSH T1A586F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798FA0A2B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE