General
- Target 2026-09-16_c3c39cbbe6a77f4cda21bf828e73d5b9_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample260916-vt2tvsdp5x
- SHA256 7a5563f22d11f5423f2a8226a0b151d30bcf6216d7f66122db9ab6fd25a3fa79
- MD5 c3c39cbbe6a77f4cda21bf828e73d5b9
- SHA1 e404821070a1bede7ed32286df5806e13cec2ef5
- SHA512 7e8fb9b5f145af85d167f9a0cb586eed7dc927651281a6cbf2a89c01f84c639d8a9c3f7853972bf3f355c4fac243d619856d554f4ff05d9b72e0ccfb79f24361
- SSDEEP 196608:E0i4i/0n/BP5fmmpB2HgWKLB8wnLTK+ZrkcB7J:EX440n/BPFtGXE3ThJ
- TLSH T1E386F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-09-16_c3c39cbbe6a77f4cda21bf828e73d5b9_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-16_c3c39cbbe6a77f4cda21bf828e73d5b9_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-16_c3c39cbbe6a77f4cda21bf828e73d5b9_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 7a5563f22d11f5423f2a8226a0b151d30bcf6216d7f66122db9ab6fd25a3fa79
- MD5 c3c39cbbe6a77f4cda21bf828e73d5b9
- SHA1 e404821070a1bede7ed32286df5806e13cec2ef5
- SHA512 7e8fb9b5f145af85d167f9a0cb586eed7dc927651281a6cbf2a89c01f84c639d8a9c3f7853972bf3f355c4fac243d619856d554f4ff05d9b72e0ccfb79f24361
- SSDEEP 196608:E0i4i/0n/BP5fmmpB2HgWKLB8wnLTK+ZrkcB7J:EX440n/BPFtGXE3ThJ
- TLSH T1E386F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE