General
- Target 2026-07-21_661cd47839adf8e867b873ca57c8787f_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_luca-stealer_njrat_ramnit_stealc_vidar
- Size 12.2MB
- Sample260721-vsbw2s1eqf
- SHA256 7986df1a88f6f10c08fd44aa5ccaa07350b073b136b6474c454e7f289e748b79
- MD5 661cd47839adf8e867b873ca57c8787f
- SHA1 ef0fb408036370177381a952edaeb4c6376ce796
- SHA512 6d813a60d2e94c085171ac76ab8e920e245c8bef57a82d445794c7978181b9b6a9da8e4482c6f136f2b4553de8b40acc3353e61cc0a3eb146f76b64b6be2a00e
- SSDEEP 196608:7irnLD9dppqMP0vi/Mn/z15frmpLDHgWKLHqwSLTK+ZrXUB3tTdgydZjBxcO4l:Wrntd78v4Mn/z1FwnXEuThErXJ0
- TLSH T157D6F136DAA01FA5F833413403A6C562D62A7C3A532047CF779CFA5A7BB32D1153E61A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-21_661cd47839adf8e867b873ca57c8787f_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-21_661cd47839adf8e867b873ca57c8787f_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-21_661cd47839adf8e867b873ca57c8787f_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_luca-stealer_njrat_ramnit_stealc_vidar
- Size 12.2MB
- SHA256 7986df1a88f6f10c08fd44aa5ccaa07350b073b136b6474c454e7f289e748b79
- MD5 661cd47839adf8e867b873ca57c8787f
- SHA1 ef0fb408036370177381a952edaeb4c6376ce796
- SHA512 6d813a60d2e94c085171ac76ab8e920e245c8bef57a82d445794c7978181b9b6a9da8e4482c6f136f2b4553de8b40acc3353e61cc0a3eb146f76b64b6be2a00e
- SSDEEP 196608:7irnLD9dppqMP0vi/Mn/z15frmpLDHgWKLHqwSLTK+ZrXUB3tTdgydZjBxcO4l:Wrntd78v4Mn/z1FwnXEuThErXJ0
- TLSH T157D6F136DAA01FA5F833413403A6C562D62A7C3A532047CF779CFA5A7BB32D1153E61A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE