General
- Target 2026-07-21_1598e38b0aab2f7b50b1658659cee78d_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample260722-bfzmsswhpd
- SHA256 bc9d33084414e21ef77d44a5a5fe4e2309065c0fed8aaa1ac12bcd52406f390b
- MD5 1598e38b0aab2f7b50b1658659cee78d
- SHA1 8519ad8998b3fd9848c8c5bb859fa81726ecd918
- SHA512 b59b603ecd29b6358f7043dbe57f6ebeec3f7e2ae048514068ee6735ceaa541ea8d33dd13d9b8258cbef37c0f7a940d2c99fba7259c54f6720c42e52a88374a1
- SSDEEP 196608:/PMvi/qn/115fhmiLJHguQTUqwsLBK+ZchGBHx:/kv4qn/11FVFPSxBKA
- TLSH T13886F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798FA0A2B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-21_1598e38b0aab2f7b50b1658659cee78d_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-21_1598e38b0aab2f7b50b1658659cee78d_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-21_1598e38b0aab2f7b50b1658659cee78d_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 bc9d33084414e21ef77d44a5a5fe4e2309065c0fed8aaa1ac12bcd52406f390b
- MD5 1598e38b0aab2f7b50b1658659cee78d
- SHA1 8519ad8998b3fd9848c8c5bb859fa81726ecd918
- SHA512 b59b603ecd29b6358f7043dbe57f6ebeec3f7e2ae048514068ee6735ceaa541ea8d33dd13d9b8258cbef37c0f7a940d2c99fba7259c54f6720c42e52a88374a1
- SSDEEP 196608:/PMvi/qn/115fhmiLJHguQTUqwsLBK+ZchGBHx:/kv4qn/11FVFPSxBKA
- TLSH T13886F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798FA0A2B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects KawaiiUnicorn
- Custom signature
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE