General
- Target 2026-07-27_64e8e8125de234d070fec95000677e1c_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample260727-hhlbhsan7w
- SHA256 cd8a737eb1a2fcb29837e58e3b1d7aff9c01537731e9810b694e9d779fb1430f
- MD5 64e8e8125de234d070fec95000677e1c
- SHA1 a16ea1b09548f8a7b843e9b385a8033a74c43800
- SHA512 680585bba99669d050df4dc3bb8bf1ca2bad3c84c15b3bdb70bafaa55965474f6e7f4f5a08a203b6d16ce3d62f17da9ad7764f62f4326f039a1a118e3b7651af
- SSDEEP 196608:EP7vi/Mn/R15fmmpLpHkWuL1qwSLXK+ZWGDBQV:EDv4Mn/R1FtNzQMX4I
- TLSH T1BF86F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798FA0A2B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-27_64e8e8125de234d070fec95000677e1c_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_64e8e8125de234d070fec95000677e1c_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_64e8e8125de234d070fec95000677e1c_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 cd8a737eb1a2fcb29837e58e3b1d7aff9c01537731e9810b694e9d779fb1430f
- MD5 64e8e8125de234d070fec95000677e1c
- SHA1 a16ea1b09548f8a7b843e9b385a8033a74c43800
- SHA512 680585bba99669d050df4dc3bb8bf1ca2bad3c84c15b3bdb70bafaa55965474f6e7f4f5a08a203b6d16ce3d62f17da9ad7764f62f4326f039a1a118e3b7651af
- SSDEEP 196608:EP7vi/Mn/R15fmmpLpHkWuL1qwSLXK+ZWGDBQV:EDv4Mn/R1FtNzQMX4I
- TLSH T1BF86F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798FA0A2B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE