General
- Target 2026-07-17_1e420e175c1c5b204cfae40fcd9ae860_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 10.8MB
- Sample260718-faesnaby2s
- SHA256 6d58e930624df764dc9ee6682aa38db7aa9f67ff78dea8bb768c8bcb9705b7b1
- MD5 1e420e175c1c5b204cfae40fcd9ae860
- SHA1 2d574c49aefbaa0641f39044a388707851010acb
- SHA512 87d2f0402b609cb8bdf3f1b6a3e454e306bbc97e16093c3b985782bae1f560bd942d5063db493eff710a2899b658736590f2b39e67e447120468b1847fbfc4e6
- SSDEEP 196608:7NbnLDDVppqMP0vi/Mn/R15fmmpLTHg8KLMqw5LYK+ZrXcB3t:pbnzV78v4Mn/R1FtPBEwYhs
- TLSH T11FB6F1369AA01F95F833913403A6C552DA2E7C3A632047CF779CF64A2BB32D1547E61E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-17_1e420e175c1c5b204cfae40fcd9ae860_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_1e420e175c1c5b204cfae40fcd9ae860_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_1e420e175c1c5b204cfae40fcd9ae860_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 10.8MB
- SHA256 6d58e930624df764dc9ee6682aa38db7aa9f67ff78dea8bb768c8bcb9705b7b1
- MD5 1e420e175c1c5b204cfae40fcd9ae860
- SHA1 2d574c49aefbaa0641f39044a388707851010acb
- SHA512 87d2f0402b609cb8bdf3f1b6a3e454e306bbc97e16093c3b985782bae1f560bd942d5063db493eff710a2899b658736590f2b39e67e447120468b1847fbfc4e6
- SSDEEP 196608:7NbnLDDVppqMP0vi/Mn/R15fmmpLTHg8KLMqw5LYK+ZrXcB3t:pbnzV78v4Mn/R1FtPBEwYhs
- TLSH T11FB6F1369AA01F95F833913403A6C552DA2E7C3A632047CF779CF64A2BB32D1547E61E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects KawaiiUnicorn
- Custom signature
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE