General
- Target 2026-09-24_01cf44e798b448ad602542ae7a5f7266_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample260925-tkb2ea114j
- SHA256 1c3996362d42ba76b59ba6a3e80a2db6fa0480ec756d48dac22c12ad27bc4ce2
- MD5 01cf44e798b448ad602542ae7a5f7266
- SHA1 3b5b2eefb2c0fe0e1e5de79613bd01df99d46240
- SHA512 6d45abd824cb67b874b8f36f321b31d41ec758a284bc33f8123275c2c0a1be4b972ecfec6d9f0a3ac50e5a72d0e6d7ab8a06d132da336f3fbbd1ffee674a5ae6
- SSDEEP 196608:/PmJ9/qn/L15fhoULBHAWKGGqwtL+K+Z6joBdt:/uJ9qn/L1FJ13pq+sU
- TLSH T1DE86F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-09-24_01cf44e798b448ad602542ae7a5f7266_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-24_01cf44e798b448ad602542ae7a5f7266_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-24_01cf44e798b448ad602542ae7a5f7266_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 1c3996362d42ba76b59ba6a3e80a2db6fa0480ec756d48dac22c12ad27bc4ce2
- MD5 01cf44e798b448ad602542ae7a5f7266
- SHA1 3b5b2eefb2c0fe0e1e5de79613bd01df99d46240
- SHA512 6d45abd824cb67b874b8f36f321b31d41ec758a284bc33f8123275c2c0a1be4b972ecfec6d9f0a3ac50e5a72d0e6d7ab8a06d132da336f3fbbd1ffee674a5ae6
- SSDEEP 196608:/PmJ9/qn/L15fhoULBHAWKGGqwtL+K+Z6joBdt:/uJ9qn/L1FJ13pq+sU
- TLSH T1DE86F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE