General
- Target 2026-07-30_8241e81ddcb0b1aa306ce959449ebeb6_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample260730-dr6xcsbr9t
- SHA256 529e1c08b9c09253c0e7ab0ea4cae2d58088cc46892fefa270be1e81f9879002
- MD5 8241e81ddcb0b1aa306ce959449ebeb6
- SHA1 d7daee083abd869589f3384fe22aa4a1d6c26c12
- SHA512 899fe577f0c23b48d02eba8c8f237daf4c85bc7e965021587cf66d93272c1a64608a8479b8e301b6b80896ae4ee04c6c0440bf5c83cda6f3122fcaf054ef484d
- SSDEEP 196608:/P69i/qn/y1ofhmBLPHgWKT9qw7L+K+Zcc2B3F:/y94qn/y1SuLX8F+KH
- TLSH T13B86F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-30_8241e81ddcb0b1aa306ce959449ebeb6_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_8241e81ddcb0b1aa306ce959449ebeb6_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_8241e81ddcb0b1aa306ce959449ebeb6_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 529e1c08b9c09253c0e7ab0ea4cae2d58088cc46892fefa270be1e81f9879002
- MD5 8241e81ddcb0b1aa306ce959449ebeb6
- SHA1 d7daee083abd869589f3384fe22aa4a1d6c26c12
- SHA512 899fe577f0c23b48d02eba8c8f237daf4c85bc7e965021587cf66d93272c1a64608a8479b8e301b6b80896ae4ee04c6c0440bf5c83cda6f3122fcaf054ef484d
- SSDEEP 196608:/P69i/qn/y1ofhmBLPHgWKT9qw7L+K+Zcc2B3F:/y94qn/y1SuLX8F+KH
- TLSH T13B86F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE