General
- Target 2026-07-27_0cf7f2455cb5fdde7f51458bf4b58cbd_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample260727-y5d4qa1bra
- SHA256 8a4b393026cda9ec8c4eb0cfdf2cf966d7cc46337425d35986ec05e74dabe2be
- MD5 0cf7f2455cb5fdde7f51458bf4b58cbd
- SHA1 5448bf3bf794543475721e89432967e417284ac7
- SHA512 4d970353714a54f000fba559ce2eaf39fe6243b15e670bc0ec1179b5293ee3298e08e25d1e7ad0e4ea6d20a76dc50ba6328409157b833df5691a2f4f96fd63fa
- SSDEEP 196608:/Wjvi/qp/y1nfhmeghHgGATtqwHLfK+ZcYOB3x:/Uv4qp/y1fpiHChfKD
- TLSH T1A286F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-27_0cf7f2455cb5fdde7f51458bf4b58cbd_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_0cf7f2455cb5fdde7f51458bf4b58cbd_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_0cf7f2455cb5fdde7f51458bf4b58cbd_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 8a4b393026cda9ec8c4eb0cfdf2cf966d7cc46337425d35986ec05e74dabe2be
- MD5 0cf7f2455cb5fdde7f51458bf4b58cbd
- SHA1 5448bf3bf794543475721e89432967e417284ac7
- SHA512 4d970353714a54f000fba559ce2eaf39fe6243b15e670bc0ec1179b5293ee3298e08e25d1e7ad0e4ea6d20a76dc50ba6328409157b833df5691a2f4f96fd63fa
- SSDEEP 196608:/Wjvi/qp/y1nfhmeghHgGATtqwHLfK+ZcYOB3x:/Uv4qp/y1fpiHChfKD
- TLSH T1A286F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE