General
- Target 2026-08-12_152e6101b692336742bdb9e6633c34e0_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample260812-kyf3vadn2y
- SHA256 a32962ca535f6a0e9f50962a274b86371f5b205bdbd6408554d4336d2db27987
- MD5 152e6101b692336742bdb9e6633c34e0
- SHA1 0442295264f01147d0847c07a64753df266758e7
- SHA512 658195442818c58317217aaa94a61999b761730af5cb5e01c3e55e81539b06dcbf990505d4a1a9105c483dbb988f5b048907508911223493fef0d70afb24416e
- SSDEEP 196608:EP3vijqn/BaIfmmpL4HgYKs6qwDLTK+Zri5Btt:EPvcqn/BaytOFTAThC
- TLSH T19686F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-12_152e6101b692336742bdb9e6633c34e0_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-12_152e6101b692336742bdb9e6633c34e0_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_152e6101b692336742bdb9e6633c34e0_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 a32962ca535f6a0e9f50962a274b86371f5b205bdbd6408554d4336d2db27987
- MD5 152e6101b692336742bdb9e6633c34e0
- SHA1 0442295264f01147d0847c07a64753df266758e7
- SHA512 658195442818c58317217aaa94a61999b761730af5cb5e01c3e55e81539b06dcbf990505d4a1a9105c483dbb988f5b048907508911223493fef0d70afb24416e
- SSDEEP 196608:EP3vijqn/BaIfmmpL4HgYKs6qwDLTK+Zri5Btt:EPvcqn/BaytOFTAThC
- TLSH T19686F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE