General
- Target 2026-07-17_20cd234bc26114bf422595a8e5f9f90d_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample260718-e818wabx7v
- SHA256 daae1f6c2d6ed419df1a5523008f4dcbbe097a2678812cbc857e398b50b1cbac
- MD5 20cd234bc26114bf422595a8e5f9f90d
- SHA1 07818c1c255d0d3fd349b6a87864e00d4e7112ad
- SHA512 49477442304ea1eddc03f73364a849feea793913e262391732d25c68e3226e498879cd296bf21ce78e1ddc4d9c967864568312d06a3ba699c97f9edbdc1888d3
- SSDEEP 196608:EMroi/Jn/UZ5fmmpLDHgWKLDqwUL+w+Z5X/B3t:ECo4Jn/UZFtnXEI+hv
- TLSH T11486F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798FA0A2B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-17_20cd234bc26114bf422595a8e5f9f90d_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_20cd234bc26114bf422595a8e5f9f90d_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_20cd234bc26114bf422595a8e5f9f90d_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 daae1f6c2d6ed419df1a5523008f4dcbbe097a2678812cbc857e398b50b1cbac
- MD5 20cd234bc26114bf422595a8e5f9f90d
- SHA1 07818c1c255d0d3fd349b6a87864e00d4e7112ad
- SHA512 49477442304ea1eddc03f73364a849feea793913e262391732d25c68e3226e498879cd296bf21ce78e1ddc4d9c967864568312d06a3ba699c97f9edbdc1888d3
- SSDEEP 196608:EMroi/Jn/UZ5fmmpLDHgWKLDqwUL+w+Z5X/B3t:ECo4Jn/UZFtnXEI+hv
- TLSH T11486F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798FA0A2B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE