General
- Target 2026-08-20_5a49a6ce999d5b1a8eb24e9ad1348612_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample260820-pxfg5sdd75
- SHA256 971b2b47ebe5870f0bea9fff6b276e36a56bca2f5141f6f1902d1ff4d6f489be
- MD5 5a49a6ce999d5b1a8eb24e9ad1348612
- SHA1 f89d46f6f21c3031a2146b9096cf459dfdbeed7d
- SHA512 efdcc43fe16634e3723ac182166e5ebb92c0f17578082bc6414c0c0767d6dfd5eebca9533f8a068b90f0c8a3ea6bd2f726d126d9e7f28584ca598379c5877efd
- SSDEEP 196608:/P0vi/qn/U16fhmiLbHguKTlqwsL8K+ZcY/B3t:/8v4qn/U1YVfP8C8KK
- TLSH T1E186F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-20_5a49a6ce999d5b1a8eb24e9ad1348612_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_5a49a6ce999d5b1a8eb24e9ad1348612_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_5a49a6ce999d5b1a8eb24e9ad1348612_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 971b2b47ebe5870f0bea9fff6b276e36a56bca2f5141f6f1902d1ff4d6f489be
- MD5 5a49a6ce999d5b1a8eb24e9ad1348612
- SHA1 f89d46f6f21c3031a2146b9096cf459dfdbeed7d
- SHA512 efdcc43fe16634e3723ac182166e5ebb92c0f17578082bc6414c0c0767d6dfd5eebca9533f8a068b90f0c8a3ea6bd2f726d126d9e7f28584ca598379c5877efd
- SSDEEP 196608:/P0vi/qn/U16fhmiLbHguKTlqwsL8K+ZcY/B3t:/8v4qn/U1YVfP8C8KK
- TLSH T1E186F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE