General
- Target 2026-09-27_959c14910748c91fa518867832b34a4c_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample260928-c69fcstcjd
- SHA256 4d32ced365da3f2c7f5f17883403c58a0d6441ee15e23a1e3dadf85cbfaeb4ab
- MD5 959c14910748c91fa518867832b34a4c
- SHA1 e06736faa034d9c92ef7dc3282c06bab9dc3995d
- SHA512 9da65256c326f4168f90ae08603c4443c272a56a400eac9323e5815774b00b6d524f90e75565b1719c0e169f025b651dd8236adaded605a162bd0bdb9eb702ba
- SSDEEP 196608:/Pdvi/qn/q1lfmmpLjHgZKT6qwnL+K+Z8v/D3t:/Fv4qn/q1JtXk8E+qX
- TLSH T1B086F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-09-27_959c14910748c91fa518867832b34a4c_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-27_959c14910748c91fa518867832b34a4c_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-27_959c14910748c91fa518867832b34a4c_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 4d32ced365da3f2c7f5f17883403c58a0d6441ee15e23a1e3dadf85cbfaeb4ab
- MD5 959c14910748c91fa518867832b34a4c
- SHA1 e06736faa034d9c92ef7dc3282c06bab9dc3995d
- SHA512 9da65256c326f4168f90ae08603c4443c272a56a400eac9323e5815774b00b6d524f90e75565b1719c0e169f025b651dd8236adaded605a162bd0bdb9eb702ba
- SSDEEP 196608:/Pdvi/qn/q1lfmmpLjHgZKT6qwnL+K+Z8v/D3t:/Fv4qn/q1JtXk8E+qX
- TLSH T1B086F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE