General
- Target 2026-09-07_7abb4bbfbd00e7abbab42962cf40aafa_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample260908-2f7arahm8y
- SHA256 adda11f61f9831e2a32336bd705c64e26451d2f9ce8cef4aa71478f496ed67b1
- MD5 7abb4bbfbd00e7abbab42962cf40aafa
- SHA1 8c0889825bb33956724049ff2154c132d5a3627a
- SHA512 34db08b9ec7b85b78b48a0852258ff12567caede993699d84c6e0f83e6470fd9515ae054bb49712589aafd302304f4dbaf221823bf553c296fff90f35813795d
- SSDEEP 196608:PPsv//qn/v1yfympSsHgDKetZwGLIK+Z8XtB3t:PEvnqn/v1ART6V3Ied
- TLSH T1B086F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-09-07_7abb4bbfbd00e7abbab42962cf40aafa_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-07_7abb4bbfbd00e7abbab42962cf40aafa_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-07_7abb4bbfbd00e7abbab42962cf40aafa_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 adda11f61f9831e2a32336bd705c64e26451d2f9ce8cef4aa71478f496ed67b1
- MD5 7abb4bbfbd00e7abbab42962cf40aafa
- SHA1 8c0889825bb33956724049ff2154c132d5a3627a
- SHA512 34db08b9ec7b85b78b48a0852258ff12567caede993699d84c6e0f83e6470fd9515ae054bb49712589aafd302304f4dbaf221823bf553c296fff90f35813795d
- SSDEEP 196608:PPsv//qn/v1yfympSsHgDKetZwGLIK+Z8XtB3t:PEvnqn/v1ART6V3Ied
- TLSH T1B086F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE