General
- Target 2026-09-30_3815003303eaf062b09c01cd3655e118_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample260930-pjyfssfa64
- SHA256 f46187e09c8e8f930478e77cd326d09b7d2a6d9380c655604f4269f47154e752
- MD5 3815003303eaf062b09c01cd3655e118
- SHA1 2ea57d0ca9d4b8900142d8e150c7eb19b2ed4c5f
- SHA512 06c4eecd5df38cbf4e01950ec88fd7d7b35e07e0774c24b0b992ff4de867d1a695ce282370294ec99f3ed808e0561f445bf222858d6f30d7e077c81768b0bc02
- SSDEEP 196608:EP0vu/qn/B15fmmdLDHgWKL6e0ZL+KXZrXuBFt:E8vsqn/B1F5nXEe+Me
- TLSH T16B86F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-09-30_3815003303eaf062b09c01cd3655e118_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-30_3815003303eaf062b09c01cd3655e118_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-30_3815003303eaf062b09c01cd3655e118_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 f46187e09c8e8f930478e77cd326d09b7d2a6d9380c655604f4269f47154e752
- MD5 3815003303eaf062b09c01cd3655e118
- SHA1 2ea57d0ca9d4b8900142d8e150c7eb19b2ed4c5f
- SHA512 06c4eecd5df38cbf4e01950ec88fd7d7b35e07e0774c24b0b992ff4de867d1a695ce282370294ec99f3ed808e0561f445bf222858d6f30d7e077c81768b0bc02
- SSDEEP 196608:EP0vu/qn/B15fmmdLDHgWKL6e0ZL+KXZrXuBFt:E8vsqn/B1F5nXEe+Me
- TLSH T16B86F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE