General
- Target 2026-07-21_02bdd357ffa4f0a9095bb14f421af392_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample260722-bg171swhrd
- SHA256 4411f6f7b91e441dcd1b492e6de95774859a2b0ffd5575b7ca9d5af37f4036cf
- MD5 02bdd357ffa4f0a9095bb14f421af392
- SHA1 891c77c4730dbd58d2555506866c43a80a42810b
- SHA512 6622732cea510884a0bfb802703e376520142e7d792012f4a44f1430a1156794d9048f96dc6adfb4e816f9ec59205823ab9d627af4009123f80e056780c9be3a
- SSDEEP 196608:OPgvi/kf/R1vfqmpLgHsSKLiqwXLjK+TrXc83+:OYv4kf/R135ufEojns
- TLSH T1A486F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A2B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-21_02bdd357ffa4f0a9095bb14f421af392_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-21_02bdd357ffa4f0a9095bb14f421af392_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-21_02bdd357ffa4f0a9095bb14f421af392_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 4411f6f7b91e441dcd1b492e6de95774859a2b0ffd5575b7ca9d5af37f4036cf
- MD5 02bdd357ffa4f0a9095bb14f421af392
- SHA1 891c77c4730dbd58d2555506866c43a80a42810b
- SHA512 6622732cea510884a0bfb802703e376520142e7d792012f4a44f1430a1156794d9048f96dc6adfb4e816f9ec59205823ab9d627af4009123f80e056780c9be3a
- SSDEEP 196608:OPgvi/kf/R1vfqmpLgHsSKLiqwXLjK+TrXc83+:OYv4kf/R135ufEojns
- TLSH T1A486F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A2B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE