General
- Target 2026-07-18_011244aa64f62e026515614dca04d437_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample260718-n76lmsay4p
- SHA256 681a0ccaa099eac97aea0702e6d3599eeac4cc776bc5644d6b2273d83634b5bc
- MD5 011244aa64f62e026515614dca04d437
- SHA1 9c65b716949908b85cfb6ff12e9372c1e67c700b
- SHA512 ec145ea0d668fb4741a915a7581d523d1da99711274e1e387e47c2a3121f54d5eead6c600b5bc88858805a63e7d715ecef57b3d247165fe211b9494c962e3861
- SSDEEP 196608:EP0vi/7n/R15fmmpLOHgWKL6qwlL2K+Z1XXB9t:E8v47n/R1Ft8XEi2Xn
- TLSH T13986F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A2B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-18_011244aa64f62e026515614dca04d437_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-18_011244aa64f62e026515614dca04d437_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_011244aa64f62e026515614dca04d437_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 681a0ccaa099eac97aea0702e6d3599eeac4cc776bc5644d6b2273d83634b5bc
- MD5 011244aa64f62e026515614dca04d437
- SHA1 9c65b716949908b85cfb6ff12e9372c1e67c700b
- SHA512 ec145ea0d668fb4741a915a7581d523d1da99711274e1e387e47c2a3121f54d5eead6c600b5bc88858805a63e7d715ecef57b3d247165fe211b9494c962e3861
- SSDEEP 196608:EP0vi/7n/R15fmmpLOHgWKL6qwlL2K+Z1XXB9t:E8v47n/R1Ft8XEi2Xn
- TLSH T13986F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A2B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE