General
- Target 2026-08-09_bf6c37e2f1b2862c02f50781276ba9ef_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample260809-cglm1aybqa
- SHA256 c9eb73df2ac4c47464f1aab22ba98193622c4ab9ff254ae10966d49e76696d5c
- MD5 bf6c37e2f1b2862c02f50781276ba9ef
- SHA1 dff4f5f4663af6adb22171f88157a74d0bc527b9
- SHA512 803c13e6fbd67ce2d9195e0d43e8de148e5e07505e3ff10bc21fe1c4125fd5f790916718d9ef48368e490f3b2f343e3695d7f9fd69bed9e2436836aa65b9df9b
- SSDEEP 196608:/P0viQqn/y15fhmwLbHgWKTsqw7qrK+ZcY/B8t:/8vnqn/y1FnfX83rKK
- TLSH T16F86F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-09_bf6c37e2f1b2862c02f50781276ba9ef_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_bf6c37e2f1b2862c02f50781276ba9ef_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_bf6c37e2f1b2862c02f50781276ba9ef_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 c9eb73df2ac4c47464f1aab22ba98193622c4ab9ff254ae10966d49e76696d5c
- MD5 bf6c37e2f1b2862c02f50781276ba9ef
- SHA1 dff4f5f4663af6adb22171f88157a74d0bc527b9
- SHA512 803c13e6fbd67ce2d9195e0d43e8de148e5e07505e3ff10bc21fe1c4125fd5f790916718d9ef48368e490f3b2f343e3695d7f9fd69bed9e2436836aa65b9df9b
- SSDEEP 196608:/P0viQqn/y15fhmwLbHgWKTsqw7qrK+ZcY/B8t:/8vnqn/y1FnfX83rKK
- TLSH T16F86F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE