General
- Target 2026-07-31_93a4cb17a8d516c8492feb5e2ce185c2_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_luca-stealer_njrat_ramnit_stealc_vidar
- Size 14.0MB
- Sample260731-3jtphaap5z
- SHA256 2ef2b5fa47fd873979b7d0058eb6f74b8e60ffea357f0a66cbe737e1e902c84e
- MD5 93a4cb17a8d516c8492feb5e2ce185c2
- SHA1 519f20f9a5f6b8a48ad62fd787da7753e2285562
- SHA512 f47efa3283e64a51832f2502429918b030c122716c2f9497359e01d4270b90b740f26d2ff26ba13b1d8264d69fd5c0b0f26ca76432f92069fdfd64ea073cdaa9
- SSDEEP 393216:RJEKUxqnvQ9ndd7Hv4Fn/R1HtnXEOThsr6Jo:RtUxgvkz7QF/LNnXFC6Jo
- TLSH T1EBE60126DAA01F95F933413403A68966D92E7C3E532047CF779CFA4A3BB36D1143E61A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-31_93a4cb17a8d516c8492feb5e2ce185c2_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_93a4cb17a8d516c8492feb5e2ce185c2_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_93a4cb17a8d516c8492feb5e2ce185c2_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_luca-stealer_njrat_ramnit_stealc_vidar
- Size 14.0MB
- SHA256 2ef2b5fa47fd873979b7d0058eb6f74b8e60ffea357f0a66cbe737e1e902c84e
- MD5 93a4cb17a8d516c8492feb5e2ce185c2
- SHA1 519f20f9a5f6b8a48ad62fd787da7753e2285562
- SHA512 f47efa3283e64a51832f2502429918b030c122716c2f9497359e01d4270b90b740f26d2ff26ba13b1d8264d69fd5c0b0f26ca76432f92069fdfd64ea073cdaa9
- SSDEEP 393216:RJEKUxqnvQ9ndd7Hv4Fn/R1HtnXEOThsr6Jo:RtUxgvkz7QF/LNnXFC6Jo
- TLSH T1EBE60126DAA01F95F933413403A68966D92E7C3E532047CF779CFA4A3BB36D1143E61A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE