General
- Target 2026-08-02_ca79f48a549caf26e2b1fed3fd37a562_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample260802-qzet3abl2s
- SHA256 e6ae65491698baf7d5a91b7cec6a0074f06af205715eb8f9a83c778f0f0aed09
- MD5 ca79f48a549caf26e2b1fed3fd37a562
- SHA1 f2ffe7ceea6bc49c2b2cd8eec22f4f147c84bda9
- SHA512 02231fd63596b92b5e22f8f604b756cfe0065598f9488d06e922a0b001cd492221992419e3a5365a691e5b6ee68310d289b37ef39c0af27a3edfab822d7d1eb4
- SSDEEP 196608:/PYpi/qn/S7GTmmULEHgWKT2NwEL+K+Z8T/BVt:/wp4qn/S7IQCX8w+q7
- TLSH T17486F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-02_ca79f48a549caf26e2b1fed3fd37a562_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_ca79f48a549caf26e2b1fed3fd37a562_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_ca79f48a549caf26e2b1fed3fd37a562_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 e6ae65491698baf7d5a91b7cec6a0074f06af205715eb8f9a83c778f0f0aed09
- MD5 ca79f48a549caf26e2b1fed3fd37a562
- SHA1 f2ffe7ceea6bc49c2b2cd8eec22f4f147c84bda9
- SHA512 02231fd63596b92b5e22f8f604b756cfe0065598f9488d06e922a0b001cd492221992419e3a5365a691e5b6ee68310d289b37ef39c0af27a3edfab822d7d1eb4
- SSDEEP 196608:/PYpi/qn/S7GTmmULEHgWKT2NwEL+K+Z8T/BVt:/wp4qn/S7IQCX8w+q7
- TLSH T17486F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE