General
- Target 2026-08-18_053e0a42c3412bcf3c2ee30020b6c66f_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample260818-sv716avemd
- SHA256 3e150d1e15156fc607b7f17df3c1468b21edb6c2c1a3e72c05982edf649745e3
- MD5 053e0a42c3412bcf3c2ee30020b6c66f
- SHA1 1d87b65e2ad57fb74235c0364a731cdc1c2412e8
- SHA512 605328f0121c4ec219741d19cae08403c98504a82645ea9058db2a4ee40f76eefa449e5204576aecb77d657c3fa91345ed546a2ec7afa4795479400a58b28e90
- SSDEEP 196608:EQLZieqE/B1KfmmpLyHgEKo6cw5L+H+ZIXyB3e:ESZRqE/B1otY1n4+/i
- TLSH T15086F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A2B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-18_053e0a42c3412bcf3c2ee30020b6c66f_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-18_053e0a42c3412bcf3c2ee30020b6c66f_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_053e0a42c3412bcf3c2ee30020b6c66f_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 3e150d1e15156fc607b7f17df3c1468b21edb6c2c1a3e72c05982edf649745e3
- MD5 053e0a42c3412bcf3c2ee30020b6c66f
- SHA1 1d87b65e2ad57fb74235c0364a731cdc1c2412e8
- SHA512 605328f0121c4ec219741d19cae08403c98504a82645ea9058db2a4ee40f76eefa449e5204576aecb77d657c3fa91345ed546a2ec7afa4795479400a58b28e90
- SSDEEP 196608:EQLZieqE/B1KfmmpLyHgEKo6cw5L+H+ZIXyB3e:ESZRqE/B1otY1n4+/i
- TLSH T15086F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A2B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE