General
- Target 2026-08-08_c2fea1132b8ea9eba91f5e18449509d7_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 12.8MB
- Sample260808-s2fkgstwaw
- SHA256 adf2c702903700e7511cbf5de36f6494bda57ffdbec414519de2ccd0a219588a
- MD5 c2fea1132b8ea9eba91f5e18449509d7
- SHA1 0424c0c106f62f1a1330137347c4407bf3d24c94
- SHA512 3101f7dff1ee0d4f63fb59679ca70118aeff42e56de0785fc1b954ede602a3b3bd661bddc22e92e27f0a9c268084263bc882d9e91459ed9af86656a7c2731123
- SSDEEP 393216:RJEKUxqnvQbnnd78vuMn/VCvtiXEO+h6:RtUxgvOd7vM/8liXF
- TLSH T1B7D6F1269AA01F95F833413403A68952D92E7C3E636047CF779CFA4A3BB36D1147E61E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-08_c2fea1132b8ea9eba91f5e18449509d7_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_c2fea1132b8ea9eba91f5e18449509d7_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_c2fea1132b8ea9eba91f5e18449509d7_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 12.8MB
- SHA256 adf2c702903700e7511cbf5de36f6494bda57ffdbec414519de2ccd0a219588a
- MD5 c2fea1132b8ea9eba91f5e18449509d7
- SHA1 0424c0c106f62f1a1330137347c4407bf3d24c94
- SHA512 3101f7dff1ee0d4f63fb59679ca70118aeff42e56de0785fc1b954ede602a3b3bd661bddc22e92e27f0a9c268084263bc882d9e91459ed9af86656a7c2731123
- SSDEEP 393216:RJEKUxqnvQbnnd78vuMn/VCvtiXEO+h6:RtUxgvOd7vM/8liXF
- TLSH T1B7D6F1269AA01F95F833413403A68952D92E7C3E636047CF779CFA4A3BB36D1147E61E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE