General
- Target 2026-08-12_2dddfbbb9141502178c6400c277b6141_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 7.9MB
- Sample260812-g211msah83
- SHA256 871e907aaae13713198e2c35d6e7137ca1e7a91f265154d8c8eb02ae3c18da1e
- MD5 2dddfbbb9141502178c6400c277b6141
- SHA1 e784681eb5a316c720778fe07c4299d190033457
- SHA512 c56f8f352243477fbb3d64136c3e92e578c1f990c9b74c89df3099ed426f869025b4017e4d0b89d352f927a91138554b104a1079e5cf68f5b4f8917fac9cb483
- SSDEEP 196608:EP0vi/M4/R15fmmpL/HJWKLQqw5LTK+zrQLB3t:E8v4M4/R1FtbgEkT3K
- TLSH T1DF86F179E9A01FD4F433A2340661D551D1A97C3E63608BCF2799F60A2B337E1607FA1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-12_2dddfbbb9141502178c6400c277b6141_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-12_2dddfbbb9141502178c6400c277b6141_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_2dddfbbb9141502178c6400c277b6141_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 7.9MB
- SHA256 871e907aaae13713198e2c35d6e7137ca1e7a91f265154d8c8eb02ae3c18da1e
- MD5 2dddfbbb9141502178c6400c277b6141
- SHA1 e784681eb5a316c720778fe07c4299d190033457
- SHA512 c56f8f352243477fbb3d64136c3e92e578c1f990c9b74c89df3099ed426f869025b4017e4d0b89d352f927a91138554b104a1079e5cf68f5b4f8917fac9cb483
- SSDEEP 196608:EP0vi/M4/R15fmmpL/HJWKLQqw5LTK+zrQLB3t:E8v4M4/R1FtbgEkT3K
- TLSH T1DF86F179E9A01FD4F433A2340661D551D1A97C3E63608BCF2799F60A2B337E1607FA1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE