General
- Target 2026-07-20_bf2db87a5b654d4f550d61986a83e4c7_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_luca-stealer_njrat_ramnit_stealc_vidar
- Size 9.3MB
- Sample260720-jdk1mah18l
- SHA256 ed43b0fb85b16a78d094be1658273035b456351648cde68af00d15398f1f4fda
- MD5 bf2db87a5b654d4f550d61986a83e4c7
- SHA1 ed6d8f198c75b041882a93d7a47bfbd097eaeb1e
- SHA512 b02e34ff3ea6f3de996fcb862efff4809576d7851ee67e5aac2c62fef9cce4fa24116b6663e99874801c065e9b2fc7915c8e449b5be2f7983f7289143043142b
- SSDEEP 196608:EP0vi/Mn/R1GfmmpLiHgWKL6kw5LTK+ZrXcB3tTden5ZjBxcO45:E8v4Mn/R1MtgXE4ThsrUJs
- TLSH T151A6F129E9A01EE4F533A2340662D572D165BC3E632087CF2798F90A3B336E1657F716
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-20_bf2db87a5b654d4f550d61986a83e4c7_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_bf2db87a5b654d4f550d61986a83e4c7_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_bf2db87a5b654d4f550d61986a83e4c7_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_luca-stealer_njrat_ramnit_stealc_vidar
- Size 9.3MB
- SHA256 ed43b0fb85b16a78d094be1658273035b456351648cde68af00d15398f1f4fda
- MD5 bf2db87a5b654d4f550d61986a83e4c7
- SHA1 ed6d8f198c75b041882a93d7a47bfbd097eaeb1e
- SHA512 b02e34ff3ea6f3de996fcb862efff4809576d7851ee67e5aac2c62fef9cce4fa24116b6663e99874801c065e9b2fc7915c8e449b5be2f7983f7289143043142b
- SSDEEP 196608:EP0vi/Mn/R1GfmmpLiHgWKL6kw5LTK+ZrXcB3tTden5ZjBxcO45:E8v4Mn/R1MtgXE4ThsrUJs
- TLSH T151A6F129E9A01EE4F533A2340662D572D165BC3E632087CF2798F90A3B336E1657F716
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE