General
- Target 2026-08-09_6edd9569789735d42fee15da0c95a78d_agent-tesla_amadey_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_luca-stealer_njrat_ramnit_smoke-loader_stealc_vidar_wannacry
- Size 15.7MB
- Sample260809-prq2paer3w
- SHA256 a3a78eca52aaa7a5d47b46970dc25bca3d00909d89267e087b4b07244afe8309
- MD5 6edd9569789735d42fee15da0c95a78d
- SHA1 03d8eaac1e5d547dd49012a6e78790c687f6d3e3
- SHA512 6d8efeb42561d7158220a640f548b880b1936370f846dad43dcb2c8cc1f1ffc2337a98a6e71bdeaf49f14819874a55bd1d3fabb68cc1e62453793277b85242eb
- SSDEEP 393216:Tbntd28v4jn/R1FMEXE91QsrHJk2npJsb:Hj2Zj/L6EXmBHJk2pQ
- TLSH T1A8F6F122EAA01FA5F833813407A69566D63A7C3A172047CF7348FA5A3F736D1543E71A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-09_6edd9569789735d42fee15da0c95a78d_agent-tesla_amadey_cobalt-strike_coinminer_cryptbot_elex.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_6edd9569789735d42fee15da0c95a78d_agent-tesla_amadey_cobalt-strike_coinminer_cryptbot_elex.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_6edd9569789735d42fee15da0c95a78d_agent-tesla_amadey_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_luca-stealer_njrat_ramnit_smoke-loader_stealc_vidar_wannacry
- Size 15.7MB
- SHA256 a3a78eca52aaa7a5d47b46970dc25bca3d00909d89267e087b4b07244afe8309
- MD5 6edd9569789735d42fee15da0c95a78d
- SHA1 03d8eaac1e5d547dd49012a6e78790c687f6d3e3
- SHA512 6d8efeb42561d7158220a640f548b880b1936370f846dad43dcb2c8cc1f1ffc2337a98a6e71bdeaf49f14819874a55bd1d3fabb68cc1e62453793277b85242eb
- SSDEEP 393216:Tbntd28v4jn/R1FMEXE91QsrHJk2npJsb:Hj2Zj/L6EXmBHJk2pQ
- TLSH T1A8F6F122EAA01FA5F833813407A69566D63A7C3A172047CF7348FA5A3F736D1543E71A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE