General
- Target 2026-08-10_cc21f79f5a4358a9cee6cf87b0acb0ed_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample260810-wt9edaen5z
- SHA256 c33b9ed70678b8259ae65e26673cbb6fe95340979131a16bd4827e0ba9e5d0aa
- MD5 cc21f79f5a4358a9cee6cf87b0acb0ed
- SHA1 88e2c45d35b94b3792969f3aa326aca429b8563f
- SHA512 87de3a069c177e88581e4d0070c1c98481048df8877e2096c396c742033b039aa977997c5fa7b474c26f4d4e2cffa4755f3892b155a056c8618c6c8aafea9970
- SSDEEP 196608:/P0Ri/qn/q1GfmmpLPHgWKT6qwFL+K+Z8U/B3t:/8R4qn/q1Mt7X8S+qm
- TLSH T1C086F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-10_cc21f79f5a4358a9cee6cf87b0acb0ed_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_cc21f79f5a4358a9cee6cf87b0acb0ed_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_cc21f79f5a4358a9cee6cf87b0acb0ed_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 c33b9ed70678b8259ae65e26673cbb6fe95340979131a16bd4827e0ba9e5d0aa
- MD5 cc21f79f5a4358a9cee6cf87b0acb0ed
- SHA1 88e2c45d35b94b3792969f3aa326aca429b8563f
- SHA512 87de3a069c177e88581e4d0070c1c98481048df8877e2096c396c742033b039aa977997c5fa7b474c26f4d4e2cffa4755f3892b155a056c8618c6c8aafea9970
- SSDEEP 196608:/P0Ri/qn/q1GfmmpLPHgWKT6qwFL+K+Z8U/B3t:/8R4qn/q1Mt7X8S+qm
- TLSH T1C086F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE