General
- Target 2026-08-01_6181e95d89264019f932d9bea5a3a002_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample260801-zvdwmsgk6t
- SHA256 88737c71aec22b4511590e427fc6c0fd93de35f94ad776f480871435f40de26b
- MD5 6181e95d89264019f932d9bea5a3a002
- SHA1 36bf0bc48a7d7fc01ff8c99036d12f0cb05b7864
- SHA512 8f642bb4458d281a51ab6592bb5985efa3cdd33cbfeff569622a3708524d61a5a71c05b973029f3dc7ebad2046d7e864ff0e8f37e559c826227213b381bf7ded
- SSDEEP 196608:EPXvi/zn/B1VfmmJLkHgWKL6qwrL+K+xUXqB3t:EPv4zn/B15NKXEk+i6
- TLSH T11E86F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A2B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-01_6181e95d89264019f932d9bea5a3a002_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_6181e95d89264019f932d9bea5a3a002_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_6181e95d89264019f932d9bea5a3a002_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 88737c71aec22b4511590e427fc6c0fd93de35f94ad776f480871435f40de26b
- MD5 6181e95d89264019f932d9bea5a3a002
- SHA1 36bf0bc48a7d7fc01ff8c99036d12f0cb05b7864
- SHA512 8f642bb4458d281a51ab6592bb5985efa3cdd33cbfeff569622a3708524d61a5a71c05b973029f3dc7ebad2046d7e864ff0e8f37e559c826227213b381bf7ded
- SSDEEP 196608:EPXvi/zn/B1VfmmJLkHgWKL6qwrL+K+xUXqB3t:EPv4zn/B15NKXEk+i6
- TLSH T11E86F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A2B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE