General
- Target 2026-07-30_97608ec966ed69f17244ea38df5121ac_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_luca-stealer_njrat_ramnit_stealc_vidar
- Size 14.0MB
- Sample260730-183btsge36
- SHA256 16c3eae8ccee00db798a3995e242445ffaaa303e30eaac56b96ed7ef02829415
- MD5 97608ec966ed69f17244ea38df5121ac
- SHA1 76f3023ef3a633d0323fd9e2c181206abf95523c
- SHA512 a2b4bb7ecb8504b3b405f7214f14d4010fffd08e59772bdc49dcc433c65b4d5f2508e2ea1f3f81c60e06f291544cea53cf244ded6ae7ea1b5f405553fba70b37
- SSDEEP 393216:RJEKUxqnvQ9n0d78v4Mn/R1FtnXEOThs/6J4:RtUxgvkM7ZM/LbnXFG6J4
- TLSH T173E60126DAA01F95F933413403A68966D92E7C3E532047CF779CFA4A3BB36D1143E61A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-30_97608ec966ed69f17244ea38df5121ac_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_97608ec966ed69f17244ea38df5121ac_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_97608ec966ed69f17244ea38df5121ac_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_luca-stealer_njrat_ramnit_stealc_vidar
- Size 14.0MB
- SHA256 16c3eae8ccee00db798a3995e242445ffaaa303e30eaac56b96ed7ef02829415
- MD5 97608ec966ed69f17244ea38df5121ac
- SHA1 76f3023ef3a633d0323fd9e2c181206abf95523c
- SHA512 a2b4bb7ecb8504b3b405f7214f14d4010fffd08e59772bdc49dcc433c65b4d5f2508e2ea1f3f81c60e06f291544cea53cf244ded6ae7ea1b5f405553fba70b37
- SSDEEP 393216:RJEKUxqnvQ9n0d78v4Mn/R1FtnXEOThs/6J4:RtUxgvkM7ZM/LbnXFG6J4
- TLSH T173E60126DAA01F95F933413403A68966D92E7C3E532047CF779CFA4A3BB36D1143E61A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE