General
- Target 2026-08-11_2fe0b55a0c583e0abb6aff99f7acc78b_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample260811-d3vcpszzgs
- SHA256 3961a7bc0aeea29c1f3ed8ff0b5b9d3664c685196034797c8b50ba640c8b772d
- MD5 2fe0b55a0c583e0abb6aff99f7acc78b
- SHA1 d7bb04852fbd07749907e684d323e28b191c9471
- SHA512 e537599d08434023b769b7d9da0af5392a1c0cf5f219ef7603aebb91e53df13c44ace254280abde5cb393a7c3e9f6a63e38e4e5ff3b536b5cb04e2c41109fbee
- SSDEEP 196608:EP0vG/qn/B15fmmjLDHgSKL6qw5L+KXZrP/B3t:E8vUqn/B1FPnTEO+M3
- TLSH T1F886F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A2B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-11_2fe0b55a0c583e0abb6aff99f7acc78b_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-11_2fe0b55a0c583e0abb6aff99f7acc78b_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-11_2fe0b55a0c583e0abb6aff99f7acc78b_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 3961a7bc0aeea29c1f3ed8ff0b5b9d3664c685196034797c8b50ba640c8b772d
- MD5 2fe0b55a0c583e0abb6aff99f7acc78b
- SHA1 d7bb04852fbd07749907e684d323e28b191c9471
- SHA512 e537599d08434023b769b7d9da0af5392a1c0cf5f219ef7603aebb91e53df13c44ace254280abde5cb393a7c3e9f6a63e38e4e5ff3b536b5cb04e2c41109fbee
- SSDEEP 196608:EP0vG/qn/B15fmmjLDHgSKL6qw5L+KXZrP/B3t:E8vUqn/B1FPnTEO+M3
- TLSH T1F886F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A2B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE