General
- Target 2026-07-29_1f3738a67e4c47558e5b523d262a8037_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample260729-2xaywathne
- SHA256 7ea3424c37778f87e6041a45ac309211b869eee3066eb4b20fbfb333dbaab7be
- MD5 1f3738a67e4c47558e5b523d262a8037
- SHA1 5f2883342b766d88ad5cdf2254204fad45a778d1
- SHA512 ffd14e432ae128e6b1dd166693c82865dafd18b0ac4caa1e04c0b13ae0d6e26b99f5fcaa5a7d42919aaf1d44dd9913c658ed6bf46738ea122bc7e7921676019b
- SSDEEP 196608:EP2v1/qn/B15fmmpLgHgWKq7qwuLlK+Zr97V3t:EOvFqn/B1FtmXROlht
- TLSH T1A586F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-29_1f3738a67e4c47558e5b523d262a8037_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_1f3738a67e4c47558e5b523d262a8037_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_1f3738a67e4c47558e5b523d262a8037_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 7ea3424c37778f87e6041a45ac309211b869eee3066eb4b20fbfb333dbaab7be
- MD5 1f3738a67e4c47558e5b523d262a8037
- SHA1 5f2883342b766d88ad5cdf2254204fad45a778d1
- SHA512 ffd14e432ae128e6b1dd166693c82865dafd18b0ac4caa1e04c0b13ae0d6e26b99f5fcaa5a7d42919aaf1d44dd9913c658ed6bf46738ea122bc7e7921676019b
- SSDEEP 196608:EP2v1/qn/B15fmmpLgHgWKq7qwuLlK+Zr97V3t:EOvFqn/B1FtmXROlht
- TLSH T1A586F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE