General
- Target 2026-08-04_0c8522df45b69b8869a734bed93d3736_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample260804-kb3y4az1ex
- SHA256 c923682f79a581e66c3abae89dbec8624f8aaa746d81078485b1a9fe55385093
- MD5 0c8522df45b69b8869a734bed93d3736
- SHA1 28dfa38fd3dace7bd0c01c539f49dcdbd84901f4
- SHA512 8a73fe0cffff4ee41b56939dd61f5aa62abdf7a117240bcacae467c346fdd0364b50edd485b38a5321123477f2c6aacee0d299c0ec4816ab42c3870f1504d545
- SSDEEP 196608:eGPIi/qB/S1yCmmjL9HgWKTpqw5q+K+Z0O/B3t:ewI4qB/S1Jf5X8++CM
- TLSH T17986F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-04_0c8522df45b69b8869a734bed93d3736_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_0c8522df45b69b8869a734bed93d3736_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_0c8522df45b69b8869a734bed93d3736_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 c923682f79a581e66c3abae89dbec8624f8aaa746d81078485b1a9fe55385093
- MD5 0c8522df45b69b8869a734bed93d3736
- SHA1 28dfa38fd3dace7bd0c01c539f49dcdbd84901f4
- SHA512 8a73fe0cffff4ee41b56939dd61f5aa62abdf7a117240bcacae467c346fdd0364b50edd485b38a5321123477f2c6aacee0d299c0ec4816ab42c3870f1504d545
- SSDEEP 196608:eGPIi/qB/S1yCmmjL9HgWKTpqw5q+K+Z0O/B3t:ewI4qB/S1Jf5X8++CM
- TLSH T17986F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE