General
- Target 2026-08-02_25d95920fe8b574f67a9b1a88f4f93cb_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample260802-g3dazavtaz
- SHA256 f977c1f0e6116af690a0698c10aa0d4e74fa98acbd2095d41bf924e78185e7cc
- MD5 25d95920fe8b574f67a9b1a88f4f93cb
- SHA1 c9eb17e8fd72d32bd7005fdef272dd9fa1569faf
- SHA512 2f95dfaa5582262caa45f012fe0526efc35023cabfacaaf7a0c391c9be0a6f26714d8a8ea095b46b07b149749e63536b5e4a28d5008c7254b61efd8cbf44364f
- SSDEEP 196608:EP/vi/un/R15fJm3LnHgsKS4rw5LYK+Z/XgB3t:E3v4un/R1F87ldlY1w
- TLSH T18E86F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A2B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-02_25d95920fe8b574f67a9b1a88f4f93cb_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_25d95920fe8b574f67a9b1a88f4f93cb_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_25d95920fe8b574f67a9b1a88f4f93cb_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 f977c1f0e6116af690a0698c10aa0d4e74fa98acbd2095d41bf924e78185e7cc
- MD5 25d95920fe8b574f67a9b1a88f4f93cb
- SHA1 c9eb17e8fd72d32bd7005fdef272dd9fa1569faf
- SHA512 2f95dfaa5582262caa45f012fe0526efc35023cabfacaaf7a0c391c9be0a6f26714d8a8ea095b46b07b149749e63536b5e4a28d5008c7254b61efd8cbf44364f
- SSDEEP 196608:EP/vi/un/R15fJm3LnHgsKS4rw5LYK+Z/XgB3t:E3v4un/R1F87ldlY1w
- TLSH T18E86F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A2B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE