General
- Target 2026-08-09_fa875fbc0724afb2cfaa58676fcb79a2_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample260809-ph1jrsxeqh
- SHA256 0d1ba9811413013733721213a72e5354f3c198b3ac7bf56137e2cee35840692d
- MD5 fa875fbc0724afb2cfaa58676fcb79a2
- SHA1 71b0521dd5cbea11741c3f055bc6cf2d9436ae1f
- SHA512 84c3b11029dfdc761702f2c6cc5c6c2ac3e431751f876be1926c2ba72b56ca717a8f3ef25d3dd4ea674ab345d73aead0f26820663e64851ea6569bfbd79c8d0c
- SSDEEP 196608:EPJvi/qn/l15fm3KL6HgSKL3hw5L+K+ZrX/8ht:ERv4qn/l1FjIzEC+hv
- TLSH T1CB86F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-09_fa875fbc0724afb2cfaa58676fcb79a2_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_fa875fbc0724afb2cfaa58676fcb79a2_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_fa875fbc0724afb2cfaa58676fcb79a2_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 0d1ba9811413013733721213a72e5354f3c198b3ac7bf56137e2cee35840692d
- MD5 fa875fbc0724afb2cfaa58676fcb79a2
- SHA1 71b0521dd5cbea11741c3f055bc6cf2d9436ae1f
- SHA512 84c3b11029dfdc761702f2c6cc5c6c2ac3e431751f876be1926c2ba72b56ca717a8f3ef25d3dd4ea674ab345d73aead0f26820663e64851ea6569bfbd79c8d0c
- SSDEEP 196608:EPJvi/qn/l15fm3KL6HgSKL3hw5L+K+ZrX/8ht:ERv4qn/l1FjIzEC+hv
- TLSH T1CB86F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE