General
- Target 2026-07-31_8f6355f8f00414a549c39f12828c9702_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample260731-3kt2naae27
- SHA256 f6a31ffb268063928e68f2ce1a0b89715ca39598aee752cf4814d00ab4027293
- MD5 8f6355f8f00414a549c39f12828c9702
- SHA1 8680ec39f1a2d87eb390c02d6695ad1cfaca969f
- SHA512 805aea1846350d4a55f7a275c8477671a1e76b438bfcb7889f433f30d88f1558fbaa79e8e1916051b854456d95b17318f3fd53583a7574c8936cd9af75c6c0fd
- SSDEEP 196608:EPfvizqn/B15f9mpwDHgCK26rw0L+KXZIX/BcS:Env8qn/B1FSUTxe+vv
- TLSH T15586F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-31_8f6355f8f00414a549c39f12828c9702_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_8f6355f8f00414a549c39f12828c9702_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_8f6355f8f00414a549c39f12828c9702_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 f6a31ffb268063928e68f2ce1a0b89715ca39598aee752cf4814d00ab4027293
- MD5 8f6355f8f00414a549c39f12828c9702
- SHA1 8680ec39f1a2d87eb390c02d6695ad1cfaca969f
- SHA512 805aea1846350d4a55f7a275c8477671a1e76b438bfcb7889f433f30d88f1558fbaa79e8e1916051b854456d95b17318f3fd53583a7574c8936cd9af75c6c0fd
- SSDEEP 196608:EPfvizqn/B15f9mpwDHgCK26rw0L+KXZIX/BcS:Env8qn/B1FSUTxe+vv
- TLSH T15586F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE