General
- Target 2026-08-01_221ae25fc974f0d9702ae5381325a9a4_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample260801-1ymhmaxhrd
- SHA256 86f99c6ba3f0d286e0ca0a7fd9f58a7e565d98a3619c67a8262cd9dd139f15a7
- MD5 221ae25fc974f0d9702ae5381325a9a4
- SHA1 ea15cbb548f5e38ff1af33606e2cb66a6dc184dd
- SHA512 73fad4402b0fce873be39abcdeb459c97d156476d5752d47e4f3d6fa8ddf0dbcb59b0f07eee68c8f48c691e51f1b91f447892c1c417c41914ecef00ee457a1f6
- SSDEEP 196608:EP9vF/Un/R15fJmpLnHgWKL4rw5LYK+Z/X+B37:EFv1Un/R1FW7XElY1u
- TLSH T19086F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-01_221ae25fc974f0d9702ae5381325a9a4_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_221ae25fc974f0d9702ae5381325a9a4_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_221ae25fc974f0d9702ae5381325a9a4_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 86f99c6ba3f0d286e0ca0a7fd9f58a7e565d98a3619c67a8262cd9dd139f15a7
- MD5 221ae25fc974f0d9702ae5381325a9a4
- SHA1 ea15cbb548f5e38ff1af33606e2cb66a6dc184dd
- SHA512 73fad4402b0fce873be39abcdeb459c97d156476d5752d47e4f3d6fa8ddf0dbcb59b0f07eee68c8f48c691e51f1b91f447892c1c417c41914ecef00ee457a1f6
- SSDEEP 196608:EP9vF/Un/R15fJmpLnHgWKL4rw5LYK+Z/X+B37:EFv1Un/R1FW7XElY1u
- TLSH T19086F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE