General
- Target 2026-09-21_48b7f17bbd580243aed5220aa47ea36b_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample260922-qsgp3sfd74
- SHA256 063cc7106a13aae555d136761d745be6402e6c66dc21de90b81a93a52839989a
- MD5 48b7f17bbd580243aed5220aa47ea36b
- SHA1 1e81a548d65d83d91229553fa77084c8b62f58ad
- SHA512 7fa9a561f338c8bd4c95f134d09bf93fe88902731cf60e9fa9385cc6add67259d12c6f261629d9ee5b197c05335d085bdb37fbfd60154a956f622a09be95edc2
- SSDEEP 196608:EPrvu/qn/B15fmmpLDHgWKLOS0CL+KXZ0/hB3t:ETvsqn/B1FtnXE9+Tp
- TLSH T11286F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-09-21_48b7f17bbd580243aed5220aa47ea36b_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-21_48b7f17bbd580243aed5220aa47ea36b_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-21_48b7f17bbd580243aed5220aa47ea36b_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 063cc7106a13aae555d136761d745be6402e6c66dc21de90b81a93a52839989a
- MD5 48b7f17bbd580243aed5220aa47ea36b
- SHA1 1e81a548d65d83d91229553fa77084c8b62f58ad
- SHA512 7fa9a561f338c8bd4c95f134d09bf93fe88902731cf60e9fa9385cc6add67259d12c6f261629d9ee5b197c05335d085bdb37fbfd60154a956f622a09be95edc2
- SSDEEP 196608:EPrvu/qn/B15fmmpLDHgWKLOS0CL+KXZ0/hB3t:ETvsqn/B1FtnXE9+Tp
- TLSH T11286F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE