General
- Target 2026-07-24_97e2ee2e0a2653bcbf7629e1e5ab3052_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample260724-wl91yahh38
- SHA256 715a6c0822b565b2035a4860896064deba6d250dee2cb2f9d7eaf86b69d751d5
- MD5 97e2ee2e0a2653bcbf7629e1e5ab3052
- SHA1 3c11e829c95be3e5924f12f6c5ab8a34c904375b
- SHA512 118fb76d642c2b848f503b35d0f033dbfd64e2baa2998cf1c19d1844e80e0a852a6aa4627ed7250f139a096c8ab18301e4d0510a1106ba660135376d52d546ed
- SSDEEP 196608:/P0vimqK/x15Jhm3LDHgWKTDqwML+K+Z8Y/B3t:/8vlqK/x1jQnX8g+qK
- TLSH T10086F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-24_97e2ee2e0a2653bcbf7629e1e5ab3052_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-24_97e2ee2e0a2653bcbf7629e1e5ab3052_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-24_97e2ee2e0a2653bcbf7629e1e5ab3052_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 715a6c0822b565b2035a4860896064deba6d250dee2cb2f9d7eaf86b69d751d5
- MD5 97e2ee2e0a2653bcbf7629e1e5ab3052
- SHA1 3c11e829c95be3e5924f12f6c5ab8a34c904375b
- SHA512 118fb76d642c2b848f503b35d0f033dbfd64e2baa2998cf1c19d1844e80e0a852a6aa4627ed7250f139a096c8ab18301e4d0510a1106ba660135376d52d546ed
- SSDEEP 196608:/P0vimqK/x15Jhm3LDHgWKTDqwML+K+Z8Y/B3t:/8vlqK/x1jQnX8g+qK
- TLSH T10086F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE