General
- Target 2026-08-16_9c3366bf4d733cf7471797e0e8b473fc_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample260816-cge58aag33
- SHA256 543177e8ebf44f241071bc0d1106fbff0115730b777682bea2ea7145c8778122
- MD5 9c3366bf4d733cf7471797e0e8b473fc
- SHA1 c6f2d7e6b13ec82bb6e535af070f1b4272e80fa7
- SHA512 315e17fe61947dc836c4f8a6b7681ec695c0def148527795eb964e7e7e0762e27bfa6ca5c3d8be4ad8ce60c1958d4c915b0a39693561197530dcca727ace6d96
- SSDEEP 196608:/PNvi7qn/q15fmmPLDHgZK06qw7LSK+Z8X/BHt:/Vvkqn/q1F7nkbgSqv
- TLSH T15286F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-16_9c3366bf4d733cf7471797e0e8b473fc_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_9c3366bf4d733cf7471797e0e8b473fc_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_9c3366bf4d733cf7471797e0e8b473fc_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 543177e8ebf44f241071bc0d1106fbff0115730b777682bea2ea7145c8778122
- MD5 9c3366bf4d733cf7471797e0e8b473fc
- SHA1 c6f2d7e6b13ec82bb6e535af070f1b4272e80fa7
- SHA512 315e17fe61947dc836c4f8a6b7681ec695c0def148527795eb964e7e7e0762e27bfa6ca5c3d8be4ad8ce60c1958d4c915b0a39693561197530dcca727ace6d96
- SSDEEP 196608:/PNvi7qn/q15fmmPLDHgZK06qw7LSK+Z8X/BHt:/Vvkqn/q1F7nkbgSqv
- TLSH T15286F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE