General
- Target 2026-07-23_b0855b6b849a448d417bbd45d91e2576_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample260723-c7v95avwdy
- SHA256 5f03e92cbbad279220f64496d98bb729319b853440550afcd82c699693a7e89d
- MD5 b0855b6b849a448d417bbd45d91e2576
- SHA1 712686eb87d7abd48f2b67fea72a2dcca09a32ec
- SHA512 65d517c810bf6fe5e6e6e740e0d4f3f033eb35481ef9910cb9289f159e0f6c6998213d2cb4e0a4f2fdaf83afd078cfe459bb13e1a2717a11bc49981a03a73fc9
- SSDEEP 196608:EPpHp/qX/R1sfmmpLwHgWKLM0w6LrK+Wrkp+qj:ERHBqX/R1Ot+XE9rWY
- TLSH T1DC86F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-23_b0855b6b849a448d417bbd45d91e2576_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_b0855b6b849a448d417bbd45d91e2576_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_b0855b6b849a448d417bbd45d91e2576_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 5f03e92cbbad279220f64496d98bb729319b853440550afcd82c699693a7e89d
- MD5 b0855b6b849a448d417bbd45d91e2576
- SHA1 712686eb87d7abd48f2b67fea72a2dcca09a32ec
- SHA512 65d517c810bf6fe5e6e6e740e0d4f3f033eb35481ef9910cb9289f159e0f6c6998213d2cb4e0a4f2fdaf83afd078cfe459bb13e1a2717a11bc49981a03a73fc9
- SSDEEP 196608:EPpHp/qX/R1sfmmpLwHgWKLM0w6LrK+Wrkp+qj:ERHBqX/R1Ot+XE9rWY
- TLSH T1DC86F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects KawaiiUnicorn
- Custom signature
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE