General
- Target 2026-09-21_b4774483ab960362523d60cc2f9c2eed_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample260922-mqlpgatfka
- SHA256 89e7682ed3d37df9036250104dc09259d6fb204e78751052baeaf86326b2d562
- MD5 b4774483ab960362523d60cc2f9c2eed
- SHA1 96e79aabbbe6c9c047f10965a3f33fb9743719ac
- SHA512 e36d87bb30fbe3ad4603e5c754fdb6dbdeeb18e79da3baefc5de6e070e45728d2953b51697b14bfd99c83d83d85c9c83d9b019685d66b19ca0071334ae2a9236
- SSDEEP 196608:/wPii/Xn/y1Gfmm9L7HgWKTaMwkL+K+Z6XjB3P:/Oi4Xn/y1MZfX85+sT
- TLSH T19286F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-09-21_b4774483ab960362523d60cc2f9c2eed_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260911-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-21_b4774483ab960362523d60cc2f9c2eed_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-21_b4774483ab960362523d60cc2f9c2eed_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 89e7682ed3d37df9036250104dc09259d6fb204e78751052baeaf86326b2d562
- MD5 b4774483ab960362523d60cc2f9c2eed
- SHA1 96e79aabbbe6c9c047f10965a3f33fb9743719ac
- SHA512 e36d87bb30fbe3ad4603e5c754fdb6dbdeeb18e79da3baefc5de6e070e45728d2953b51697b14bfd99c83d83d85c9c83d9b019685d66b19ca0071334ae2a9236
- SSDEEP 196608:/wPii/Xn/y1Gfmm9L7HgWKTaMwkL+K+Z6XjB3P:/Oi4Xn/y1MZfX85+sT
- TLSH T19286F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE