General
- Target 2026-08-15_28954a8193d7acb8e614d888defc84e4_agent-tesla_amadey_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_luca-stealer_njrat_ramnit_smoke-loader_stealc_vidar_wannacry
- Size 15.7MB
- Sample260815-jp4xwaef97
- SHA256 0e7f8c6ddad88afb534ba01887ecf08e32e9e5b556bc77a6d6488154308ed8cc
- MD5 28954a8193d7acb8e614d888defc84e4
- SHA1 170e1adf7892d8459f39e4bbc4083c95f780017a
- SHA512 522c350e2275fdb214a1cf60d95a563d70b996d85f4fe4d7260b69b420754a8b311e3de828d32bd71c629bbbfb987c6e3d5185d313f7a3da2a292e8beede423a
- SSDEEP 393216:pbntd78vaMn/R1svmXE9ThW2HJk2NuJsq:9j7bM/LemXGFHJk2AN
- TLSH T12FF6F122EAA01FA5F833813407A69566D63A7C3A172047CF7348FA5A3F736D1543E71A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-15_28954a8193d7acb8e614d888defc84e4_agent-tesla_amadey_cobalt-strike_coinminer_cryptbot_elex.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-15_28954a8193d7acb8e614d888defc84e4_agent-tesla_amadey_cobalt-strike_coinminer_cryptbot_elex.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_28954a8193d7acb8e614d888defc84e4_agent-tesla_amadey_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_luca-stealer_njrat_ramnit_smoke-loader_stealc_vidar_wannacry
- Size 15.7MB
- SHA256 0e7f8c6ddad88afb534ba01887ecf08e32e9e5b556bc77a6d6488154308ed8cc
- MD5 28954a8193d7acb8e614d888defc84e4
- SHA1 170e1adf7892d8459f39e4bbc4083c95f780017a
- SHA512 522c350e2275fdb214a1cf60d95a563d70b996d85f4fe4d7260b69b420754a8b311e3de828d32bd71c629bbbfb987c6e3d5185d313f7a3da2a292e8beede423a
- SSDEEP 393216:pbntd78vaMn/R1svmXE9ThW2HJk2NuJsq:9j7bM/LemXGFHJk2AN
- TLSH T12FF6F122EAA01FA5F833813407A69566D63A7C3A172047CF7348FA5A3F736D1543E71A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE