General
- Target 2026-08-04_f8493583c11014585148b5a00b8f8c06_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample260804-qp1nsabe96
- SHA256 c41b4cd340d80697e8ffbfe7a327e97fd7fe5b7fc74cd35deab0844710e07a39
- MD5 f8493583c11014585148b5a00b8f8c06
- SHA1 ef8f51ec55a0f02c4221110e24ba244ab187041d
- SHA512 d96ecdc4adc4e19124c3fae4b17b0ca187ab05e71611551a4b72ce6df007883c6e8566c7d0a9ca7d738e37ef80b95852b618c3a4d91459600937748d672ab911
- SSDEEP 196608:ePiIi/rB/S1GfmmjLiHgWKTdqw5L+K+Z0O/B30:e6I4rB/S1MfoX8j+CM
- TLSH T11B86F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A2B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-04_f8493583c11014585148b5a00b8f8c06_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_f8493583c11014585148b5a00b8f8c06_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_f8493583c11014585148b5a00b8f8c06_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 c41b4cd340d80697e8ffbfe7a327e97fd7fe5b7fc74cd35deab0844710e07a39
- MD5 f8493583c11014585148b5a00b8f8c06
- SHA1 ef8f51ec55a0f02c4221110e24ba244ab187041d
- SHA512 d96ecdc4adc4e19124c3fae4b17b0ca187ab05e71611551a4b72ce6df007883c6e8566c7d0a9ca7d738e37ef80b95852b618c3a4d91459600937748d672ab911
- SSDEEP 196608:ePiIi/rB/S1GfmmjLiHgWKTdqw5L+K+Z0O/B30:e6I4rB/S1MfoX8j+CM
- TLSH T11B86F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A2B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE