General
- Target 2026-07-18_3f270f77840eec5ee8c80b1c196a1cdc_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample260718-nl9feads3v
- SHA256 6209c91b1094c10d0b7640b8073a01eb68d5bfb72d3522fb08d502325f5d6e80
- MD5 3f270f77840eec5ee8c80b1c196a1cdc
- SHA1 b1eb3749e3c167689132a8b50fe9660a436a5cf5
- SHA512 aff7c109ae7ab9309ecc7568e69a4fa32b65ba1201876f780c069b7978adf10ed13c8d2df344ca43eb9d027942add58a5bad300ca1aa2ced8128475b19b8206b
- SSDEEP 196608:EM0oi/qn/UZ5f0mpLcHgPKLnq21L+w+ZgX9BkN:EFo4qn/UZFD6eEL+oN
- TLSH T12586F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-18_3f270f77840eec5ee8c80b1c196a1cdc_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-18_3f270f77840eec5ee8c80b1c196a1cdc_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_3f270f77840eec5ee8c80b1c196a1cdc_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 6209c91b1094c10d0b7640b8073a01eb68d5bfb72d3522fb08d502325f5d6e80
- MD5 3f270f77840eec5ee8c80b1c196a1cdc
- SHA1 b1eb3749e3c167689132a8b50fe9660a436a5cf5
- SHA512 aff7c109ae7ab9309ecc7568e69a4fa32b65ba1201876f780c069b7978adf10ed13c8d2df344ca43eb9d027942add58a5bad300ca1aa2ced8128475b19b8206b
- SSDEEP 196608:EM0oi/qn/UZ5f0mpLcHgPKLnq21L+w+ZgX9BkN:EFo4qn/UZFD6eEL+oN
- TLSH T12586F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE