General
- Target 2026-07-20_1a74da12de4c04c49c785fea73f1e7a6_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample260720-zhdecagt2s
- SHA256 66bfbd40b319ad652954fa5b7a711b2264c74db15485963a68cd284ab02095a0
- MD5 1a74da12de4c04c49c785fea73f1e7a6
- SHA1 7404ca3630497e7e48fd51081bc8d21c69ea1333
- SHA512 ffcf3444f9d3e911a803513c2403aee94f541cf33ca4ce343930dee800310dd8403e2225242c95536fe4923d686b2ba983a8e6fc68da5fbe9b84df880098c8b3
- SSDEEP 196608:EP0vo/Mn/R1/fmmpL8HgWKR6qw5LEK+ZrX+BTt:E8vuMn/R1HtiXKOEhu
- TLSH T1C486F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-20_1a74da12de4c04c49c785fea73f1e7a6_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_1a74da12de4c04c49c785fea73f1e7a6_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_1a74da12de4c04c49c785fea73f1e7a6_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 66bfbd40b319ad652954fa5b7a711b2264c74db15485963a68cd284ab02095a0
- MD5 1a74da12de4c04c49c785fea73f1e7a6
- SHA1 7404ca3630497e7e48fd51081bc8d21c69ea1333
- SHA512 ffcf3444f9d3e911a803513c2403aee94f541cf33ca4ce343930dee800310dd8403e2225242c95536fe4923d686b2ba983a8e6fc68da5fbe9b84df880098c8b3
- SSDEEP 196608:EP0vo/Mn/R1/fmmpL8HgWKR6qw5LEK+ZrX+BTt:E8vuMn/R1HtiXKOEhu
- TLSH T1C486F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE