General
- Target 2026-08-20_072bc35149a19ca7f0cdf90243ff3520_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample260820-thttfafk71
- SHA256 615c917fabeed8678d1b9a4860a36d65a8389259f7e6952dad294afe12ef6a36
- MD5 072bc35149a19ca7f0cdf90243ff3520
- SHA1 3416a9280c979e81e54ffff291b475f44bf9e0de
- SHA512 a19938258398be3ba92424b8be17efe12b30969f9eadaec1f08052f8288685d15075f20fbf6766504a5f15523361ec51361ffd49e3aa75b835de83e30d2b8829
- SSDEEP 196608:/P0vi/qn/y16fhmiLYHguKTlqwsLDK+ZcY/B3t:/8v4qn/y1YVGP8CDKK
- TLSH T19686F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-20_072bc35149a19ca7f0cdf90243ff3520_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_072bc35149a19ca7f0cdf90243ff3520_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_072bc35149a19ca7f0cdf90243ff3520_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 615c917fabeed8678d1b9a4860a36d65a8389259f7e6952dad294afe12ef6a36
- MD5 072bc35149a19ca7f0cdf90243ff3520
- SHA1 3416a9280c979e81e54ffff291b475f44bf9e0de
- SHA512 a19938258398be3ba92424b8be17efe12b30969f9eadaec1f08052f8288685d15075f20fbf6766504a5f15523361ec51361ffd49e3aa75b835de83e30d2b8829
- SSDEEP 196608:/P0vi/qn/y16fhmiLYHguKTlqwsLDK+ZcY/B3t:/8v4qn/y1YVGP8CDKK
- TLSH T19686F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE