General
- Target 2026-09-24_593e8b9eca6a0b4e5472a21006f454a7_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample260925-laaftsch57
- SHA256 29a398ea054fa99a689bc975bd1fa8ead306b97400946259c7bc4a143abce39d
- MD5 593e8b9eca6a0b4e5472a21006f454a7
- SHA1 2e7cccc7f5dbe0d4d602fd313a97914251718b19
- SHA512 9b7f8cd584ae36a4fd063aafacd44133c6894c0453f2e48799c5d0813c70b8eb41a6aa1f8a0b5186ffa400ac13e912bfc1675febc9a3c1c5ddddd5e0df605d48
- SSDEEP 196608:EPxviaMn/s1HfmmpLTHgWKL1qwULYK+Zri+B3W:E5vRMn/s1/tPXEWYhx
- TLSH T10986F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798FA0A2B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-09-24_593e8b9eca6a0b4e5472a21006f454a7_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-24_593e8b9eca6a0b4e5472a21006f454a7_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-24_593e8b9eca6a0b4e5472a21006f454a7_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 29a398ea054fa99a689bc975bd1fa8ead306b97400946259c7bc4a143abce39d
- MD5 593e8b9eca6a0b4e5472a21006f454a7
- SHA1 2e7cccc7f5dbe0d4d602fd313a97914251718b19
- SHA512 9b7f8cd584ae36a4fd063aafacd44133c6894c0453f2e48799c5d0813c70b8eb41a6aa1f8a0b5186ffa400ac13e912bfc1675febc9a3c1c5ddddd5e0df605d48
- SSDEEP 196608:EPxviaMn/s1HfmmpLTHgWKL1qwULYK+Zri+B3W:E5vRMn/s1/tPXEWYhx
- TLSH T10986F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798FA0A2B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE