General
- Target 2026-09-30_1db0c062e3b6d648df95cd7694036ab6_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample260930-ql6evsyxev
- SHA256 d17eb96888622bf213d406b59a2941d3e2aa54751e70ccb7aef7527023b3869f
- MD5 1db0c062e3b6d648df95cd7694036ab6
- SHA1 cf50dd844602b555831d96903226521eace8f3de
- SHA512 b90a531569e36103b2b98ceea172fa835050baf5886e65d96626b1c786905666d35aea9dadce309cb6c15aaaf8774a32a5b7acef64fda3dc0c9cf51db7769b65
- SSDEEP 196608:/9iJ9/qn/L15fhmULbHAWKGDywtLIK+66cGB6u:/YJ9qn/L1Fbf3pFI/n
- TLSH T13F86F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798FA0A2B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-09-30_1db0c062e3b6d648df95cd7694036ab6_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-30_1db0c062e3b6d648df95cd7694036ab6_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-30_1db0c062e3b6d648df95cd7694036ab6_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 d17eb96888622bf213d406b59a2941d3e2aa54751e70ccb7aef7527023b3869f
- MD5 1db0c062e3b6d648df95cd7694036ab6
- SHA1 cf50dd844602b555831d96903226521eace8f3de
- SHA512 b90a531569e36103b2b98ceea172fa835050baf5886e65d96626b1c786905666d35aea9dadce309cb6c15aaaf8774a32a5b7acef64fda3dc0c9cf51db7769b65
- SSDEEP 196608:/9iJ9/qn/L15fhmULbHAWKGDywtLIK+66cGB6u:/YJ9qn/L1Fbf3pFI/n
- TLSH T13F86F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798FA0A2B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE