General
- Target 2026-07-30_d8ce9d7bd4cdb27a98f445fc991b934c_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample260730-dblaqaag26
- SHA256 3954f90a980b86d4d594f77d0b966eb6fd0e83e0cc2bd89d13dcf8a561bbe4bd
- MD5 d8ce9d7bd4cdb27a98f445fc991b934c
- SHA1 87671e35eff49f7bf10ee96ce821e5308208ec3a
- SHA512 4bd9cb9f8aee803713aae7d58b302dacdaad4b91ebd19da41668982c7b7f60502395234f42566fa4d91fca8696ff8eac214ea34599df203eff182492e6a970a1
- SSDEEP 196608:/nJviWqn/y1VfBmpL5HgWKTtqw7L+K+1cY/Bat:/JvFqn/y15e1X81+uK
- TLSH T14386F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-30_d8ce9d7bd4cdb27a98f445fc991b934c_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_d8ce9d7bd4cdb27a98f445fc991b934c_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_d8ce9d7bd4cdb27a98f445fc991b934c_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 3954f90a980b86d4d594f77d0b966eb6fd0e83e0cc2bd89d13dcf8a561bbe4bd
- MD5 d8ce9d7bd4cdb27a98f445fc991b934c
- SHA1 87671e35eff49f7bf10ee96ce821e5308208ec3a
- SHA512 4bd9cb9f8aee803713aae7d58b302dacdaad4b91ebd19da41668982c7b7f60502395234f42566fa4d91fca8696ff8eac214ea34599df203eff182492e6a970a1
- SSDEEP 196608:/nJviWqn/y1VfBmpL5HgWKTtqw7L+K+1cY/Bat:/JvFqn/y15e1X81+uK
- TLSH T14386F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE