General
- Target 2026-07-19_586122362de185e212fec268b64f23ea_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample260719-vkchlsft2q
- SHA256 7f82df252c084c707b7ae2e42907da611e89c386dd92773df313295b03a79a65
- MD5 586122362de185e212fec268b64f23ea
- SHA1 15fbc0ae7d3bf809e441430390d0581e3baf4b68
- SHA512 5f3c4859a27f8114835405484b435e94ff4129718b83e11f8d584c0dbf7b1b22cd589edee5d86e82c6c39f5576a2f81f647f133edb6be1dae5d90cf19e13b47e
- SSDEEP 196608:EP09i/qn/R15fmmXLIHgWKL6qw5LTK+ZrXcB3t:E894qn/R1F72XEOThs
- TLSH T1B386F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798FA0A2B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-19_586122362de185e212fec268b64f23ea_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-19_586122362de185e212fec268b64f23ea_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_586122362de185e212fec268b64f23ea_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 7f82df252c084c707b7ae2e42907da611e89c386dd92773df313295b03a79a65
- MD5 586122362de185e212fec268b64f23ea
- SHA1 15fbc0ae7d3bf809e441430390d0581e3baf4b68
- SHA512 5f3c4859a27f8114835405484b435e94ff4129718b83e11f8d584c0dbf7b1b22cd589edee5d86e82c6c39f5576a2f81f647f133edb6be1dae5d90cf19e13b47e
- SSDEEP 196608:EP09i/qn/R15fmmXLIHgWKL6qw5LTK+ZrXcB3t:E894qn/R1F72XEOThs
- TLSH T1B386F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798FA0A2B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE