General
- Target 2026-08-17_3208895fb2a64bbe6a791991e1ff9ac1_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample260817-tmha7sthpf
- SHA256 733b72fb91b023b854d70ecb3ef1fa1ecb618bea272fde4c2ecb92aa6719aba4
- MD5 3208895fb2a64bbe6a791991e1ff9ac1
- SHA1 39ee6be5b165571131d72188da45229312976d52
- SHA512 26427705740dbff565fb9546c5e2ec66aeb9653f63686c0cf4269319ee747caca26a1db198dbf8305732cc06df13c37b5213235362c468eea08cef08ff54bcb2
- SSDEEP 196608:/Pdvieqi/yt/f4mpL1HgWKT6qdYL+K+UcYLBdt:/1vZqi/ytHfpX8A+P2
- TLSH T1E986F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A2B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-17_3208895fb2a64bbe6a791991e1ff9ac1_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-17_3208895fb2a64bbe6a791991e1ff9ac1_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_3208895fb2a64bbe6a791991e1ff9ac1_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 733b72fb91b023b854d70ecb3ef1fa1ecb618bea272fde4c2ecb92aa6719aba4
- MD5 3208895fb2a64bbe6a791991e1ff9ac1
- SHA1 39ee6be5b165571131d72188da45229312976d52
- SHA512 26427705740dbff565fb9546c5e2ec66aeb9653f63686c0cf4269319ee747caca26a1db198dbf8305732cc06df13c37b5213235362c468eea08cef08ff54bcb2
- SSDEEP 196608:/Pdvieqi/yt/f4mpL1HgWKT6qdYL+K+UcYLBdt:/1vZqi/ytHfpX8A+P2
- TLSH T1E986F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A2B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE