General
- Target 2026-08-10_f99879109769ea75752d31e6aebb86ae_agent-tesla_amadey_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_luca-stealer_njrat_ramnit_smoke-loader_stealc_vidar_wannacry
- Size 15.7MB
- Sample260810-qac9yahp9t
- SHA256 5da91451c5164c010197b7b25ae778e0250314778f75c6fbd0854e02cbde3474
- MD5 f99879109769ea75752d31e6aebb86ae
- SHA1 4ff1f4e7518e9a1ca04fb882f752070f92c2167a
- SHA512 2adb73b807bd4fd197d33b9d3110fc05e464f571c9475d4b58f3c6753f31f5bf1a955179d7dc21dc08db70f97c29477c245250ba0e248f81d54a2df441f3b159
- SSDEEP 393216:Qbnid78vjMw/R1FtnfEAThQr6Jk2NuJs+:OC7mMILbnfPu6Jk2YZ
- TLSH T165F6F122EAA01FA5F833813407A69566D63A7C3A172047CF7348FA5A3F736D1543E71A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-10_f99879109769ea75752d31e6aebb86ae_agent-tesla_amadey_cobalt-strike_coinminer_cryptbot_elex.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_f99879109769ea75752d31e6aebb86ae_agent-tesla_amadey_cobalt-strike_coinminer_cryptbot_elex.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_f99879109769ea75752d31e6aebb86ae_agent-tesla_amadey_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_luca-stealer_njrat_ramnit_smoke-loader_stealc_vidar_wannacry
- Size 15.7MB
- SHA256 5da91451c5164c010197b7b25ae778e0250314778f75c6fbd0854e02cbde3474
- MD5 f99879109769ea75752d31e6aebb86ae
- SHA1 4ff1f4e7518e9a1ca04fb882f752070f92c2167a
- SHA512 2adb73b807bd4fd197d33b9d3110fc05e464f571c9475d4b58f3c6753f31f5bf1a955179d7dc21dc08db70f97c29477c245250ba0e248f81d54a2df441f3b159
- SSDEEP 393216:Qbnid78vjMw/R1FtnfEAThQr6Jk2NuJs+:OC7mMILbnfPu6Jk2YZ
- TLSH T165F6F122EAA01FA5F833813407A69566D63A7C3A172047CF7348FA5A3F736D1543E71A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE