General
- Target 2026-08-08_827cedda74bd6f81eb4b9d142f23bb87_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 12.8MB
- Sample260808-tb34jazeka
- SHA256 016705d746cd7d027834dbfad9651dd1bfd2b701abd295525560cebf875b4916
- MD5 827cedda74bd6f81eb4b9d142f23bb87
- SHA1 8f38affa9845d2d04f8a4c00cd18d1292e5fb0d0
- SHA512 eab5f5bcfa1f29e909b8ccd616ac779db35b83b410a376365853298e161d3f02f56cad2c774aea9f70e2ca9cc508e0de9f7d2aab607fe7bddb4ac30b3e8684e6
- SSDEEP 393216:UJEKUxqnVQbnbd78v4qn/B1FtMXKm+hv:UtUxgVOJ7Zq/bbMXr
- TLSH T142D6F1269AA01F95F833413403A68952D92E7C3E636047CF779CFA4A3BB36D1147E61E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-08_827cedda74bd6f81eb4b9d142f23bb87_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_827cedda74bd6f81eb4b9d142f23bb87_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_827cedda74bd6f81eb4b9d142f23bb87_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 12.8MB
- SHA256 016705d746cd7d027834dbfad9651dd1bfd2b701abd295525560cebf875b4916
- MD5 827cedda74bd6f81eb4b9d142f23bb87
- SHA1 8f38affa9845d2d04f8a4c00cd18d1292e5fb0d0
- SHA512 eab5f5bcfa1f29e909b8ccd616ac779db35b83b410a376365853298e161d3f02f56cad2c774aea9f70e2ca9cc508e0de9f7d2aab607fe7bddb4ac30b3e8684e6
- SSDEEP 393216:UJEKUxqnVQbnbd78v4qn/B1FtMXKm+hv:UtUxgVOJ7Zq/bbMXr
- TLSH T142D6F1269AA01F95F833413403A68952D92E7C3E636047CF779CFA4A3BB36D1147E61E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE