General
- Target 2026-07-31_f30834cdd919e6a5e1156fdda36faa61_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_luca-stealer_njrat_ramnit_stealc_vidar
- Size 8.7MB
- Sample260731-tmn4radb69
- SHA256 94be64de9f8d4d2420b7048edd15e8c0a349be0885ada64cd6c8ebb734b5f5c4
- MD5 f30834cdd919e6a5e1156fdda36faa61
- SHA1 2a073fe59ca28aef6b623bb0a18ab9c2868ff547
- SHA512 769859cefb44e88307d35880a1174867cf81aa5f74112740d2f9ee3d7f9439a7b064562c5dcbb65795982ba12af638e4fe19e20478d6782f23ca0f771f7504e8
- SSDEEP 196608:EP0Gi/Mn/R11fmmpLDHIWKL6qwSLTK+ZIXcB3tTdXU:E8G4Mn/R1Ztn/E9TusrG
- TLSH T1EF96F139E9A01EE4F433A2344662D551D1697C3E632087CF2798FA0A3B337E1657FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-31_f30834cdd919e6a5e1156fdda36faa61_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_f30834cdd919e6a5e1156fdda36faa61_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_f30834cdd919e6a5e1156fdda36faa61_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_luca-stealer_njrat_ramnit_stealc_vidar
- Size 8.7MB
- SHA256 94be64de9f8d4d2420b7048edd15e8c0a349be0885ada64cd6c8ebb734b5f5c4
- MD5 f30834cdd919e6a5e1156fdda36faa61
- SHA1 2a073fe59ca28aef6b623bb0a18ab9c2868ff547
- SHA512 769859cefb44e88307d35880a1174867cf81aa5f74112740d2f9ee3d7f9439a7b064562c5dcbb65795982ba12af638e4fe19e20478d6782f23ca0f771f7504e8
- SSDEEP 196608:EP0Gi/Mn/R11fmmpLDHIWKL6qwSLTK+ZIXcB3tTdXU:E8G4Mn/R1Ztn/E9TusrG
- TLSH T1EF96F139E9A01EE4F433A2344662D551D1697C3E632087CF2798FA0A3B337E1657FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE