General
- Target 2026-08-10_5ecf97f6f12c8769a31473feb72fb49b_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_stealc_vidar
- Size 8.3MB
- Sample260810-y5q4aaad47
- SHA256 a70c46946909f47f85fbf58ec941fe6d9138e31f37185f5f4a5132b1632a0ad0
- MD5 5ecf97f6f12c8769a31473feb72fb49b
- SHA1 bea274e479d4af0865b30f81beac015cdc25754f
- SHA512 a2048c2c700932063ad215ea507d6dec94a7a9f6caba84f245a56f26bd207e78a7e678c4c14a5676d579d961a2441168265f524ac29b9427ca4b299e4209b645
- SSDEEP 196608:EP0vi/Mn/R1xfmmLLDHgWKLNqwSLTK+ZrOcB3tTdM:E8v4Mn/R1NvnXEMThPr2
- TLSH T15D96F139E9A01FD4F433A2344661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-10_5ecf97f6f12c8769a31473feb72fb49b_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_5ecf97f6f12c8769a31473feb72fb49b_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_5ecf97f6f12c8769a31473feb72fb49b_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_stealc_vidar
- Size 8.3MB
- SHA256 a70c46946909f47f85fbf58ec941fe6d9138e31f37185f5f4a5132b1632a0ad0
- MD5 5ecf97f6f12c8769a31473feb72fb49b
- SHA1 bea274e479d4af0865b30f81beac015cdc25754f
- SHA512 a2048c2c700932063ad215ea507d6dec94a7a9f6caba84f245a56f26bd207e78a7e678c4c14a5676d579d961a2441168265f524ac29b9427ca4b299e4209b645
- SSDEEP 196608:EP0vi/Mn/R1xfmmLLDHgWKLNqwSLTK+ZrOcB3tTdM:E8v4Mn/R1NvnXEMThPr2
- TLSH T15D96F139E9A01FD4F433A2344661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE