General
- Target 2026-07-30_9bef5e53fef05219d679229ad48685bd_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample260730-dnecyayapb
- SHA256 55006557077f1d807b7c6a69c0a29da56a4cd9dad435326a2828bfe79bbaca08
- MD5 9bef5e53fef05219d679229ad48685bd
- SHA1 4ae9874d14040fc362eb730d2aba26b49d5c336b
- SHA512 9be7329d65b525cbdd70f7ed32a57e7bcb45e0c7e29c69e0eb575bbdfe529562181646c5781f956660a08461126bc76b076c02d701d8828074cc0d69607051d0
- SSDEEP 196608:/PVviWqn/y15fBm5sOHgWKTDqDrL+K+ZcY2B3Y:/9vFqn/y1FGjX8a+Kz
- TLSH T13086F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-30_9bef5e53fef05219d679229ad48685bd_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_9bef5e53fef05219d679229ad48685bd_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_9bef5e53fef05219d679229ad48685bd_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 55006557077f1d807b7c6a69c0a29da56a4cd9dad435326a2828bfe79bbaca08
- MD5 9bef5e53fef05219d679229ad48685bd
- SHA1 4ae9874d14040fc362eb730d2aba26b49d5c336b
- SHA512 9be7329d65b525cbdd70f7ed32a57e7bcb45e0c7e29c69e0eb575bbdfe529562181646c5781f956660a08461126bc76b076c02d701d8828074cc0d69607051d0
- SSDEEP 196608:/PVviWqn/y15fBm5sOHgWKTDqDrL+K+ZcY2B3Y:/9vFqn/y1FGjX8a+Kz
- TLSH T13086F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE