General
- Target 2026-07-28_68f209777e2500834a51c3a87786a883_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample260728-ly3saafn9t
- SHA256 840bafc5db012c31f01d8494596185244adbc872f65e25229b5b71b04c350bfa
- MD5 68f209777e2500834a51c3a87786a883
- SHA1 f81c62ebdbce43a9a6df10b963621cf4ce16e261
- SHA512 4935f6ba74dca1eae31cacc4b79f13272aac0d5d2fb5e96e03b73572a313cc9198d62868064be5494c554459e77a6efa7dfbc595c1d33a5876a5c4a096986dfc
- SSDEEP 196608:Elnip/qX/K15fympLbHgWKLFpwULTK+Zrk1BRj:EZiBqX/K1FRXXEJThw
- TLSH T18686F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-28_68f209777e2500834a51c3a87786a883_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_68f209777e2500834a51c3a87786a883_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_68f209777e2500834a51c3a87786a883_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 840bafc5db012c31f01d8494596185244adbc872f65e25229b5b71b04c350bfa
- MD5 68f209777e2500834a51c3a87786a883
- SHA1 f81c62ebdbce43a9a6df10b963621cf4ce16e261
- SHA512 4935f6ba74dca1eae31cacc4b79f13272aac0d5d2fb5e96e03b73572a313cc9198d62868064be5494c554459e77a6efa7dfbc595c1d33a5876a5c4a096986dfc
- SSDEEP 196608:Elnip/qX/K15fympLbHgWKLFpwULTK+Zrk1BRj:EZiBqX/K1FRXXEJThw
- TLSH T18686F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE