General
- Target 2026-07-31_04c6a42df9983b5c70180f42759e2b41_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample260731-lvvmhazfne
- SHA256 22b6548ae461b7218086623ce8fbc07e8645755cface228bcbc89f7864ea978d
- MD5 04c6a42df9983b5c70180f42759e2b41
- SHA1 b5c1362499e4344f9c495420c099366405e81e37
- SHA512 683c2b8e44529c935d88b6dd708bceecc9cad6862538f547f448584373949ea90d450bd7985e76a5ff12f850397b9c001e7a8444cad979f947a8015e66b5c06c
- SSDEEP 196608:OPgdi/M0/L1ofmmpLDHsqKL6qwSLjK+ZwXuB3+:OYd4M0/L1StnXEdjq+
- TLSH T16586F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-31_04c6a42df9983b5c70180f42759e2b41_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_04c6a42df9983b5c70180f42759e2b41_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_04c6a42df9983b5c70180f42759e2b41_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 22b6548ae461b7218086623ce8fbc07e8645755cface228bcbc89f7864ea978d
- MD5 04c6a42df9983b5c70180f42759e2b41
- SHA1 b5c1362499e4344f9c495420c099366405e81e37
- SHA512 683c2b8e44529c935d88b6dd708bceecc9cad6862538f547f448584373949ea90d450bd7985e76a5ff12f850397b9c001e7a8444cad979f947a8015e66b5c06c
- SSDEEP 196608:OPgdi/M0/L1ofmmpLDHsqKL6qwSLjK+ZwXuB3+:OYd4M0/L1StnXEdjq+
- TLSH T16586F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE