General
- Target 2026-08-17_c458425ed76759b96e2059dfad9f263d_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample260817-she5lssgre
- SHA256 75d23acd71088c5b4ab2638ee5ca8111ea8448dd6e05689d57adecdd56e46aed
- MD5 c458425ed76759b96e2059dfad9f263d
- SHA1 41ae3af78ff651ae0d935562794ea0967b7edc9c
- SHA512 53860c77d61e5c6a363e0a2b09da2fadc40b360d068e9adaef22930cd1dca4cc88f2e4ca784132d5a309a5a6e4cb111eb607a69b58e175f8f12d73c1c7897c70
- SSDEEP 196608:/PNpo/qt/+1GTmmULEHgWKT2qwyL+K+Z8TXBVt:/Vpuqt/+1IQCX8x+qz
- TLSH T18486F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-17_c458425ed76759b96e2059dfad9f263d_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-17_c458425ed76759b96e2059dfad9f263d_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_c458425ed76759b96e2059dfad9f263d_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 75d23acd71088c5b4ab2638ee5ca8111ea8448dd6e05689d57adecdd56e46aed
- MD5 c458425ed76759b96e2059dfad9f263d
- SHA1 41ae3af78ff651ae0d935562794ea0967b7edc9c
- SHA512 53860c77d61e5c6a363e0a2b09da2fadc40b360d068e9adaef22930cd1dca4cc88f2e4ca784132d5a309a5a6e4cb111eb607a69b58e175f8f12d73c1c7897c70
- SSDEEP 196608:/PNpo/qt/+1GTmmULEHgWKT2qwyL+K+Z8TXBVt:/Vpuqt/+1IQCX8x+qz
- TLSH T18486F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE