General
- Target 2026-08-14_9af75d9bb197eb850cfb4cd5f69a0e3a_agent-tesla_amadey_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_luca-stealer_njrat_ramnit_smoke-loader_stealc_vidar_wannacry
- Size 10.1MB
- Sample260814-3axpssvsbs
- SHA256 0282a5561ca9d7d8caec2524988c3a010f384f8c9aaa44ad064ff82093abccd6
- MD5 9af75d9bb197eb850cfb4cd5f69a0e3a
- SHA1 9868ad015684758eb287aedf2cc1a088a3cb4ca1
- SHA512 27909793a0339b508184cae39717d54ba22dfa40d09bd9f23b34ad3408518432691a38eafd1f667060a6783b5249b2a1c606975bac6778d58b969b67e1708108
- SSDEEP 196608:EP0vi/Mn/R15fmmpL0HSWKLsqw3LTn+ZsOcB3tqdgn5ZjBxcO4T:E8v4Mn/R1FtaREuTTPyiJ
- TLSH T121B6F125EAA40EF4F473913846A2D526D2757C3A572087CF2398FA0A2F337E1593E716
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-14_9af75d9bb197eb850cfb4cd5f69a0e3a_agent-tesla_amadey_cobalt-strike_coinminer_cryptbot_elex.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-14_9af75d9bb197eb850cfb4cd5f69a0e3a_agent-tesla_amadey_cobalt-strike_coinminer_cryptbot_elex.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_9af75d9bb197eb850cfb4cd5f69a0e3a_agent-tesla_amadey_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_luca-stealer_njrat_ramnit_smoke-loader_stealc_vidar_wannacry
- Size 10.1MB
- SHA256 0282a5561ca9d7d8caec2524988c3a010f384f8c9aaa44ad064ff82093abccd6
- MD5 9af75d9bb197eb850cfb4cd5f69a0e3a
- SHA1 9868ad015684758eb287aedf2cc1a088a3cb4ca1
- SHA512 27909793a0339b508184cae39717d54ba22dfa40d09bd9f23b34ad3408518432691a38eafd1f667060a6783b5249b2a1c606975bac6778d58b969b67e1708108
- SSDEEP 196608:EP0vi/Mn/R15fmmpL0HSWKLsqw3LTn+ZsOcB3tqdgn5ZjBxcO4T:E8v4Mn/R1FtaREuTTPyiJ
- TLSH T121B6F125EAA40EF4F473913846A2D526D2757C3A572087CF2398FA0A2F337E1593E716
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE