General
- Target 2026-08-08_de0a94e949277ee379e9f5b5149436ca_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_luca-stealer_njrat_ramnit_stealc_vidar
- Size 14.2MB
- Sample260808-sw191ahl8t
- SHA256 5906baf6ec095a7ab6a9f3dfe8be450460984ec57600c2397d4dc267e696f81a
- MD5 de0a94e949277ee379e9f5b5149436ca
- SHA1 43e343ec0031b25b449bc889d1fc509137de5107
- SHA512 54d15dd9d85088e3ea5ba5dcc99b84152a97603b8629d626a6bc59d36c0a2a470688ef4aca48a0fc54f3a214623bf7136f2dd154731e264c7c6f3c96e843529f
- SSDEEP 393216:vJEKUxqnvQ9n0d78v4Mn/R1FtgXE0Thsr61M:vtUxgvkM7ZM/LbgXTC61M
- TLSH T158E60122DAA01FA5F933413403A68966D52E7C3E532047CF779CFA4A3BB36D1147E61A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-08_de0a94e949277ee379e9f5b5149436ca_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_de0a94e949277ee379e9f5b5149436ca_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_de0a94e949277ee379e9f5b5149436ca_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_luca-stealer_njrat_ramnit_stealc_vidar
- Size 14.2MB
- SHA256 5906baf6ec095a7ab6a9f3dfe8be450460984ec57600c2397d4dc267e696f81a
- MD5 de0a94e949277ee379e9f5b5149436ca
- SHA1 43e343ec0031b25b449bc889d1fc509137de5107
- SHA512 54d15dd9d85088e3ea5ba5dcc99b84152a97603b8629d626a6bc59d36c0a2a470688ef4aca48a0fc54f3a214623bf7136f2dd154731e264c7c6f3c96e843529f
- SSDEEP 393216:vJEKUxqnvQ9n0d78v4Mn/R1FtgXE0Thsr61M:vtUxgvkM7ZM/LbgXTC61M
- TLSH T158E60122DAA01FA5F933413403A68966D52E7C3E532047CF779CFA4A3BB36D1147E61A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE