General
- Target 2026-07-20_48f2e123b06c5678d813d2d5f7229f5a_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_luca-stealer_njrat_ramnit_stealc_vidar
- Size 17.0MB
- Sample260720-wdyypsbz3t
- SHA256 19075e7f5f777fc604203e72bc51013748ca20f2a15a8a07ee847a0cc5fa4053
- MD5 48f2e123b06c5678d813d2d5f7229f5a
- SHA1 c8f89aee14b827f508d3a12a56f97452fc579e84
- SHA512 cd5ca81fb6de02708212b02d5241c8aaec30ca3a468d1aea53499eb87e06bb3fbe1bd858b9566ffec2e921ec9ab695dd602e868ead1f2ba02a721f3f18216893
- SSDEEP 393216:/JSYJEKUxqnvQ9n0d78v4Mn/R1FtgXE0Thsr61k:xDtUxgvkM7ZM/LbgXTC61k
- TLSH T1AF07BFF68C705691FE3A4C34DEA1AA648D357C291F908BCF2905B18B67736F7603D289
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-20_48f2e123b06c5678d813d2d5f7229f5a_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_48f2e123b06c5678d813d2d5f7229f5a_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_48f2e123b06c5678d813d2d5f7229f5a_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_luca-stealer_njrat_ramnit_stealc_vidar
- Size 17.0MB
- SHA256 19075e7f5f777fc604203e72bc51013748ca20f2a15a8a07ee847a0cc5fa4053
- MD5 48f2e123b06c5678d813d2d5f7229f5a
- SHA1 c8f89aee14b827f508d3a12a56f97452fc579e84
- SHA512 cd5ca81fb6de02708212b02d5241c8aaec30ca3a468d1aea53499eb87e06bb3fbe1bd858b9566ffec2e921ec9ab695dd602e868ead1f2ba02a721f3f18216893
- SSDEEP 393216:/JSYJEKUxqnvQ9n0d78v4Mn/R1FtgXE0Thsr61k:xDtUxgvkM7ZM/LbgXTC61k
- TLSH T1AF07BFF68C705691FE3A4C34DEA1AA648D357C291F908BCF2905B18B67736F7603D289
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE