General
- Target 2026-08-12_f2eb40596ead57293afe82427b158b42_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample260812-3s47laxapf
- SHA256 9866723fb94a33c01c9ec3ce932af9e07e6784d906fe2ae0a5cd826b50c10c82
- MD5 f2eb40596ead57293afe82427b158b42
- SHA1 3711117836213e18af4326e03b4504557cf4a8b5
- SHA512 fb8726df55e11937dd1a3e97ae7efe39df98d86cc58fab44761871af0174f489a2f224d82bf9509afed82145e18208c6d0a644b5180d0c1b1e4af02ac3dd89f8
- SSDEEP 196608:EP0vi/qn/61VfmmpL9HgBlL6qw5L+K+ZkXPB3t:E8v4qn/615tBIZO+Gf
- TLSH T16886F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-12_f2eb40596ead57293afe82427b158b42_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-12_f2eb40596ead57293afe82427b158b42_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_f2eb40596ead57293afe82427b158b42_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 9866723fb94a33c01c9ec3ce932af9e07e6784d906fe2ae0a5cd826b50c10c82
- MD5 f2eb40596ead57293afe82427b158b42
- SHA1 3711117836213e18af4326e03b4504557cf4a8b5
- SHA512 fb8726df55e11937dd1a3e97ae7efe39df98d86cc58fab44761871af0174f489a2f224d82bf9509afed82145e18208c6d0a644b5180d0c1b1e4af02ac3dd89f8
- SSDEEP 196608:EP0vi/qn/61VfmmpL9HgBlL6qw5L+K+ZkXPB3t:E8v4qn/615tBIZO+Gf
- TLSH T16886F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE