General
- Target 2026-08-05_520443b9aed4e3fe054dcea7c8245e13_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample260805-rh63natxbt
- SHA256 9934b08b27e68ff93bafb68a4685fcb754cbd7275832f7cb3aba8fd7218d3cc7
- MD5 520443b9aed4e3fe054dcea7c8245e13
- SHA1 02d0ae5a7107f135ea9d6a81d57d98fc54ae8c15
- SHA512 b551462ef782ee4f01cdb776e4a6e953a8a443bba046fc80b9167d0494e2f876a47da192c848b62266a4a8049426512147ad1b004eea45c8accc689ab6f26e4f
- SSDEEP 196608:EP0vc/q0/R15fmmpkdHgmKLyqw+b2K+Z4XjBVt:E8vaq0/R1FtSHEp2+z
- TLSH T1E786F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798FA0A2B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-05_520443b9aed4e3fe054dcea7c8245e13_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_520443b9aed4e3fe054dcea7c8245e13_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_520443b9aed4e3fe054dcea7c8245e13_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 9934b08b27e68ff93bafb68a4685fcb754cbd7275832f7cb3aba8fd7218d3cc7
- MD5 520443b9aed4e3fe054dcea7c8245e13
- SHA1 02d0ae5a7107f135ea9d6a81d57d98fc54ae8c15
- SHA512 b551462ef782ee4f01cdb776e4a6e953a8a443bba046fc80b9167d0494e2f876a47da192c848b62266a4a8049426512147ad1b004eea45c8accc689ab6f26e4f
- SSDEEP 196608:EP0vc/q0/R15fmmpkdHgmKLyqw+b2K+Z4XjBVt:E8vaq0/R1FtSHEp2+z
- TLSH T1E786F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798FA0A2B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE