General
- Target 2026-07-27_0669f043ade93bd15bdbd6e1d0f5705b_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 10.8MB
- Sample260727-sd1krawsaz
- SHA256 80e9418433f9c9479c95829f8742c7b1cd75878e7fba7ce7d13f8222f9e67813
- MD5 0669f043ade93bd15bdbd6e1d0f5705b
- SHA1 8877f36347ca651a4f7f58f89002815d83813908
- SHA512 03aaa35b5740d8078b7958280ddf22fdc1ae7f873dbbb5b01372ab261d1c539fc25847fb33f58a1360a55c91b2f20441a56444e3b7392fc659855ce87ed0b7c9
- SSDEEP 196608:pkmnLnrpppqvP0vx/qn/B1VfmmpLZHg4KL6qw5L+K+ZrXrB5I:GmnfpQ8vZqn/B15tlpEO+hb
- TLSH T173B6F1369AA01F95F833913403A6C552DA2E7C3A632047CF779CF64A2BB32D1547E61E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-27_0669f043ade93bd15bdbd6e1d0f5705b_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_0669f043ade93bd15bdbd6e1d0f5705b_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_0669f043ade93bd15bdbd6e1d0f5705b_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 10.8MB
- SHA256 80e9418433f9c9479c95829f8742c7b1cd75878e7fba7ce7d13f8222f9e67813
- MD5 0669f043ade93bd15bdbd6e1d0f5705b
- SHA1 8877f36347ca651a4f7f58f89002815d83813908
- SHA512 03aaa35b5740d8078b7958280ddf22fdc1ae7f873dbbb5b01372ab261d1c539fc25847fb33f58a1360a55c91b2f20441a56444e3b7392fc659855ce87ed0b7c9
- SSDEEP 196608:pkmnLnrpppqvP0vx/qn/B1VfmmpLZHg4KL6qw5L+K+ZrXrB5I:GmnfpQ8vZqn/B15tlpEO+hb
- TLSH T173B6F1369AA01F95F833913403A6C552DA2E7C3A632047CF779CF64A2BB32D1547E61E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE