General
- Target 2026-07-30_43af756c265129196786c1a90d241d1e_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample260730-nnentagf33
- SHA256 dbdc41f7e234b40cb95abe0a39a1f45d2b42b2d0a8cc843adfd105e7455065be
- MD5 43af756c265129196786c1a90d241d1e
- SHA1 ac866347434030c26620118885fb13f0070adbf5
- SHA512 7b30ca3d26fe6c93c8294349ec02d367bbd3e50a56c24e9d0887a5e36b11dc4796aa895fee8fd3ba38c048e0d145c41175861065483ef6761040c1678e408273
- SSDEEP 196608:/PPoi/qn/S1GfmmOLgHgWKT6qwILkK+Z8X/B3t:/Ho4qn/S1M6mX8Dkqv
- TLSH T10E86F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-30_43af756c265129196786c1a90d241d1e_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_43af756c265129196786c1a90d241d1e_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_43af756c265129196786c1a90d241d1e_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 dbdc41f7e234b40cb95abe0a39a1f45d2b42b2d0a8cc843adfd105e7455065be
- MD5 43af756c265129196786c1a90d241d1e
- SHA1 ac866347434030c26620118885fb13f0070adbf5
- SHA512 7b30ca3d26fe6c93c8294349ec02d367bbd3e50a56c24e9d0887a5e36b11dc4796aa895fee8fd3ba38c048e0d145c41175861065483ef6761040c1678e408273
- SSDEEP 196608:/PPoi/qn/S1GfmmOLgHgWKT6qwILkK+Z8X/B3t:/Ho4qn/S1M6mX8Dkqv
- TLSH T10E86F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE