General
- Target 2026-09-23_3ec99eee9626b354bed94c6977e90fa2_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample260924-mble6asejg
- SHA256 8b54bc525dd4d1dd9e8de0944dddd5cc3d86257b41439e3ecccf8f731cb54a9c
- MD5 3ec99eee9626b354bed94c6977e90fa2
- SHA1 c595fcc9f5c5736f7cce0f52876e04413f11e41e
- SHA512 7a08d283e30f7abff862eb8202ad667775ac458d426686e53f6694239a3725ab9879953fdb07b71a44cea08bd8637290ac55b1a3c08c09820718dbbff19dde0c
- SSDEEP 196608:/P0vihqn/R1lfhmpLpHgWKTaqw0L+J+/q+QB3t:/8vyqn/R1J+1X8/+Zb
- TLSH T1B386F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-09-23_3ec99eee9626b354bed94c6977e90fa2_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-23_3ec99eee9626b354bed94c6977e90fa2_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-23_3ec99eee9626b354bed94c6977e90fa2_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 8b54bc525dd4d1dd9e8de0944dddd5cc3d86257b41439e3ecccf8f731cb54a9c
- MD5 3ec99eee9626b354bed94c6977e90fa2
- SHA1 c595fcc9f5c5736f7cce0f52876e04413f11e41e
- SHA512 7a08d283e30f7abff862eb8202ad667775ac458d426686e53f6694239a3725ab9879953fdb07b71a44cea08bd8637290ac55b1a3c08c09820718dbbff19dde0c
- SSDEEP 196608:/P0vihqn/R1lfhmpLpHgWKTaqw0L+J+/q+QB3t:/8vyqn/R1J+1X8/+Zb
- TLSH T1B386F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE