General
- Target 2026-08-10_6d3ae79851dad8e3f7f0948f71661717_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample260810-3vckcscj6v
- SHA256 36d8a43a9a30959e192cf6aeb338b1f6a83d2aaeccf58127062b1d2dad1d6deb
- MD5 6d3ae79851dad8e3f7f0948f71661717
- SHA1 36d03852aba2332fdbe3638a5a66ae6c0d103d07
- SHA512 f5b1fb1148c0f0c68076527143e5e2bbf5b1181dd75516d9c2aa9c7dfa1b3c477bbf828186c8faf6be770439b89258341f4aa526fc653821ca261029882921c5
- SSDEEP 196608:/oPpZ/qt/S1cfmmjLyHgWKYwqwDL+K+ZAXAB3V:/ipRqt/S1+fIXv++WQ
- TLSH T19F86F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-10_6d3ae79851dad8e3f7f0948f71661717_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_6d3ae79851dad8e3f7f0948f71661717_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_6d3ae79851dad8e3f7f0948f71661717_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 36d8a43a9a30959e192cf6aeb338b1f6a83d2aaeccf58127062b1d2dad1d6deb
- MD5 6d3ae79851dad8e3f7f0948f71661717
- SHA1 36d03852aba2332fdbe3638a5a66ae6c0d103d07
- SHA512 f5b1fb1148c0f0c68076527143e5e2bbf5b1181dd75516d9c2aa9c7dfa1b3c477bbf828186c8faf6be770439b89258341f4aa526fc653821ca261029882921c5
- SSDEEP 196608:/oPpZ/qt/S1cfmmjLyHgWKYwqwDL+K+ZAXAB3V:/ipRqt/S1+fIXv++WQ
- TLSH T19F86F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE