General
- Target 2026-08-08_78d5e4f8493cdd7f2e251d007a67299a_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_luca-stealer_njrat_ramnit_stealc_vidar
- Size 14.2MB
- Sample260808-nvt23swclh
- SHA256 3b79735c508178b9bd9c1bf652e23783edc7cfb96d6b1bf703d01de1625dc16a
- MD5 78d5e4f8493cdd7f2e251d007a67299a
- SHA1 c06294008ca2a4df5baf324b0447281513c8865d
- SHA512 31a5c88c71f123117def9637d1018e9207b6bc54f72d913fed4151bfffcee8085ec8bfe4c3115f8314347384d1790d9e7e0f73326ebd8320eb9c204db9980708
- SSDEEP 393216:RJEKUxqnvQ9npd78v4Mn/R1FtgXE4Thsr6Jk:RtUxgvkX7ZM/LbgXnC6Jk
- TLSH T176E60122DAA01FA5F933413403A68966D52E7C3E532047CF779CFA4A3BB36D1147E61A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-08_78d5e4f8493cdd7f2e251d007a67299a_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_78d5e4f8493cdd7f2e251d007a67299a_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_78d5e4f8493cdd7f2e251d007a67299a_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_luca-stealer_njrat_ramnit_stealc_vidar
- Size 14.2MB
- SHA256 3b79735c508178b9bd9c1bf652e23783edc7cfb96d6b1bf703d01de1625dc16a
- MD5 78d5e4f8493cdd7f2e251d007a67299a
- SHA1 c06294008ca2a4df5baf324b0447281513c8865d
- SHA512 31a5c88c71f123117def9637d1018e9207b6bc54f72d913fed4151bfffcee8085ec8bfe4c3115f8314347384d1790d9e7e0f73326ebd8320eb9c204db9980708
- SSDEEP 393216:RJEKUxqnvQ9npd78v4Mn/R1FtgXE4Thsr6Jk:RtUxgvkX7ZM/LbgXnC6Jk
- TLSH T176E60122DAA01FA5F933413403A68966D52E7C3E532047CF779CFA4A3BB36D1147E61A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE