General
- Target 2026-07-19_4d2059bb13c7486455f0ec8052a0af0e_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 10.8MB
- Sample260719-jbqs4aey6j
- SHA256 909ac927ccbe5f8b7053203ec0d5a5ea38250eb4ab224a9e8b6f03693da6b465
- MD5 4d2059bb13c7486455f0ec8052a0af0e
- SHA1 2cb346e4fcc160b9ded189e03fa90ebcb80a7ff2
- SHA512 2bfb40665734697e39364003709e68422c61cc596a86f410720309053003a721bc41d9453e20597f3645934dbb518bc913652ca4cd6771973c050a65826fc8cb
- SSDEEP 196608:7NdnLDDvppqMP0vi/Mn/R15fmmpLTHgWKLxqw5LYK+ZrjcB3t:pdnzv78v4Mn/R1FtPXEnYhw
- TLSH T10DB6F1369AA01F95F833913403A6C552DA2E7C3A632047CF779CF64A2BB32D1547E61E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-19_4d2059bb13c7486455f0ec8052a0af0e_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-19_4d2059bb13c7486455f0ec8052a0af0e_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_4d2059bb13c7486455f0ec8052a0af0e_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 10.8MB
- SHA256 909ac927ccbe5f8b7053203ec0d5a5ea38250eb4ab224a9e8b6f03693da6b465
- MD5 4d2059bb13c7486455f0ec8052a0af0e
- SHA1 2cb346e4fcc160b9ded189e03fa90ebcb80a7ff2
- SHA512 2bfb40665734697e39364003709e68422c61cc596a86f410720309053003a721bc41d9453e20597f3645934dbb518bc913652ca4cd6771973c050a65826fc8cb
- SSDEEP 196608:7NdnLDDvppqMP0vi/Mn/R15fmmpLTHgWKLxqw5LYK+ZrjcB3t:pdnzv78v4Mn/R1FtPXEnYhw
- TLSH T10DB6F1369AA01F95F833913403A6C552DA2E7C3A632047CF779CF64A2BB32D1547E61E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects KawaiiUnicorn
- Custom signature
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE