General
- Target 2026-07-29_11d9b65718c3a49e473ca46b1e1cbc95_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample260729-nf1w3ssfqa
- SHA256 80424b42a93ae6a7f4eb97a0fffcfeca29ac513de536b59b32978cd3d080c7c3
- MD5 11d9b65718c3a49e473ca46b1e1cbc95
- SHA1 0d24bfd772ddc61514e99e9591c6e6f023ed16e0
- SHA512 9c432721d7638070fe9cd33d1a148238f747cd163eba1b23802a82e1ff9953d5479905b0f3c637376bb9645bfd91f94f88bab5e55e6f31d288302530b39b30d5
- SSDEEP 196608:EWnicmWX/I15ftm+LKHgYKL6mwULpK+Zik0BR8:E4izWX/I1FdQ9E7pcZ
- TLSH T15D86F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-29_11d9b65718c3a49e473ca46b1e1cbc95_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_11d9b65718c3a49e473ca46b1e1cbc95_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_11d9b65718c3a49e473ca46b1e1cbc95_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 80424b42a93ae6a7f4eb97a0fffcfeca29ac513de536b59b32978cd3d080c7c3
- MD5 11d9b65718c3a49e473ca46b1e1cbc95
- SHA1 0d24bfd772ddc61514e99e9591c6e6f023ed16e0
- SHA512 9c432721d7638070fe9cd33d1a148238f747cd163eba1b23802a82e1ff9953d5479905b0f3c637376bb9645bfd91f94f88bab5e55e6f31d288302530b39b30d5
- SSDEEP 196608:EWnicmWX/I15ftm+LKHgYKL6mwULpK+Zik0BR8:E4izWX/I1FdQ9E7pcZ
- TLSH T15D86F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE