General
- Target 2026-08-04_0dea3addf4b305f264466039c5b06b5d_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 15.6MB
- Sample260804-ka4t1aar8y
- SHA256 31746bdd65cb0f59e65a81f06421ecefa594369bb8537715e170c8d28bb8d8ac
- MD5 0dea3addf4b305f264466039c5b06b5d
- SHA1 462c56073b2eacde35161204c221442f060f2f21
- SHA512 9e70dd96fd85981ef37c7fe0fdd19eab8095f75cd44d9aca32e71d15646c61e30fd3c5e0856a5a66cb17731d83102b2c4e7ab3c9b1e9556639c148e1f460908e
- SSDEEP 393216:/3SyJEKUxqnvQbn7d71v4Mn/R1FUnXEOThB:PRtUxgvOp7OM/LSnXF
- TLSH T198F6AEF68C705691FE3A4C34DEA1AA648D357C291F908BCF2915B18B63736F7603D289
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-04_0dea3addf4b305f264466039c5b06b5d_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_0dea3addf4b305f264466039c5b06b5d_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_0dea3addf4b305f264466039c5b06b5d_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 15.6MB
- SHA256 31746bdd65cb0f59e65a81f06421ecefa594369bb8537715e170c8d28bb8d8ac
- MD5 0dea3addf4b305f264466039c5b06b5d
- SHA1 462c56073b2eacde35161204c221442f060f2f21
- SHA512 9e70dd96fd85981ef37c7fe0fdd19eab8095f75cd44d9aca32e71d15646c61e30fd3c5e0856a5a66cb17731d83102b2c4e7ab3c9b1e9556639c148e1f460908e
- SSDEEP 393216:/3SyJEKUxqnvQbn7d71v4Mn/R1FUnXEOThB:PRtUxgvOp7OM/LSnXF
- TLSH T198F6AEF68C705691FE3A4C34DEA1AA648D357C291F908BCF2915B18B63736F7603D289
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE