General
- Target 2026-08-09_e5d633da7f07898dc28a2460e268246d_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample260809-feyfkatya1
- SHA256 19aa1695a419354ff54a980f3e5fcc3b140003e66faeb5ff5291c20e78709f52
- MD5 e5d633da7f07898dc28a2460e268246d
- SHA1 ce4eebc21db0b510c51840e7e0d7fdd57802d6ea
- SHA512 3b5c72504e911d9b83f8c843f5fa10407c83f86775f9ca0f55ed4441fb82f25225d15aa5d402a908bf1b8c8784f51b4e7ad7f096d1136313226c449922ce2286
- SSDEEP 196608:1P/ui/u8/y15fmmPLnHjW7L6zwzLuK+ZrlXB3t:13u4u8/y1FLj6Hxuh1
- TLSH T14186F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-09_e5d633da7f07898dc28a2460e268246d_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_e5d633da7f07898dc28a2460e268246d_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_e5d633da7f07898dc28a2460e268246d_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 19aa1695a419354ff54a980f3e5fcc3b140003e66faeb5ff5291c20e78709f52
- MD5 e5d633da7f07898dc28a2460e268246d
- SHA1 ce4eebc21db0b510c51840e7e0d7fdd57802d6ea
- SHA512 3b5c72504e911d9b83f8c843f5fa10407c83f86775f9ca0f55ed4441fb82f25225d15aa5d402a908bf1b8c8784f51b4e7ad7f096d1136313226c449922ce2286
- SSDEEP 196608:1P/ui/u8/y15fmmPLnHjW7L6zwzLuK+ZrlXB3t:13u4u8/y1FLj6Hxuh1
- TLSH T14186F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE