General
- Target 2026-08-02_acbffe493072fb2e0ecf99db73477af6_agent-tesla_cobalt-strike_cryptbot_darkgate_elex_gcleaner_glassworm_icedid_loki-bot_njrat_stealc_vidar
- Size 20.7MB
- Sample260802-c87pjscj2w
- SHA256 dd1b01714375420ac898ec74562d692545d53f68ef6efa907466c3626acca32d
- MD5 acbffe493072fb2e0ecf99db73477af6
- SHA1 9e42752ba4d8951c5a424a9dae57176267c2e659
- SHA512 b9f502c51880c46aea21d2d9be60bacd27995c5449413417973e70f13102399a3578b5da4d61e01aabd19b8ea17fb81e01a23197f8f70ff5e4e4c002f0cef2f4
- SSDEEP 393216:BJsQXI3kGYtoDNSG/lVz+S5JEKUxqnvQbnyd38v4Mn/i1FtnoEBTk:B/qkRoxIqtUxgvOy3ZM/+bnoqo
- TLSH T16827DFB689701691FE3A4834CEA2A964CD357C291FA0CBCF2954B18F67736F3543D289
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-02_acbffe493072fb2e0ecf99db73477af6_agent-tesla_cobalt-strike_cryptbot_darkgate_elex_gcleane.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_acbffe493072fb2e0ecf99db73477af6_agent-tesla_cobalt-strike_cryptbot_darkgate_elex_gcleane.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_acbffe493072fb2e0ecf99db73477af6_agent-tesla_cobalt-strike_cryptbot_darkgate_elex_gcleaner_glassworm_icedid_loki-bot_njrat_stealc_vidar
- Size 20.7MB
- SHA256 dd1b01714375420ac898ec74562d692545d53f68ef6efa907466c3626acca32d
- MD5 acbffe493072fb2e0ecf99db73477af6
- SHA1 9e42752ba4d8951c5a424a9dae57176267c2e659
- SHA512 b9f502c51880c46aea21d2d9be60bacd27995c5449413417973e70f13102399a3578b5da4d61e01aabd19b8ea17fb81e01a23197f8f70ff5e4e4c002f0cef2f4
- SSDEEP 393216:BJsQXI3kGYtoDNSG/lVz+S5JEKUxqnvQbnyd38v4Mn/i1FtnoEBTk:B/qkRoxIqtUxgvOy3ZM/+bnoqo
- TLSH T16827DFB689701691FE3A4834CEA2A964CD357C291FA0CBCF2954B18F67736F3543D289
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE