General
- Target 2026-07-17_2697275b0ce6af18bced5f2a78d59001_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 10.8MB
- Sample260718-e5krqagt9l
- SHA256 ba41e9d29125531d0d2558df0aee3ecb3874a066920f99c2c85757aaa30d5bb5
- MD5 2697275b0ce6af18bced5f2a78d59001
- SHA1 32354db30d2ac991553308709723d3eb2ebf4e64
- SHA512 a53cd06af063b1a537136a88e44ab9811e7b446820ff5ef8fe86b63b95bba0bc9e5d6ccdfa2c3469e45943dd57ddbfc2dfe1b6703d2f699a6604ca1c380e4ae6
- SSDEEP 196608:7NbnLDDvppqMP0vi/Mn/R1JfmmHLTHgWKLxqw5LYK+ZrjcB3t:pbnzv78v4Mn/R1VbPXEnYhw
- TLSH T16CB6F1369AA01F95F833913403A6C552DA2E7C3A632047CF779CF64A2BB32D1547E61E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-17_2697275b0ce6af18bced5f2a78d59001_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_2697275b0ce6af18bced5f2a78d59001_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_2697275b0ce6af18bced5f2a78d59001_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 10.8MB
- SHA256 ba41e9d29125531d0d2558df0aee3ecb3874a066920f99c2c85757aaa30d5bb5
- MD5 2697275b0ce6af18bced5f2a78d59001
- SHA1 32354db30d2ac991553308709723d3eb2ebf4e64
- SHA512 a53cd06af063b1a537136a88e44ab9811e7b446820ff5ef8fe86b63b95bba0bc9e5d6ccdfa2c3469e45943dd57ddbfc2dfe1b6703d2f699a6604ca1c380e4ae6
- SSDEEP 196608:7NbnLDDvppqMP0vi/Mn/R1JfmmHLTHgWKLxqw5LYK+ZrjcB3t:pbnzv78v4Mn/R1VbPXEnYhw
- TLSH T16CB6F1369AA01F95F833913403A6C552DA2E7C3A632047CF779CF64A2BB32D1547E61E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE