General
- Target 2026-10-01_ee24f4ae58e92b99349096d412f1bbe2_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample261001-14cwda1arf
- SHA256 da0a9a20e73419721b41057ce888e9b79f10a6260717892a4620414b091dcb4e
- MD5 ee24f4ae58e92b99349096d412f1bbe2
- SHA1 5d8d4fccf1597595ab6dd323a5eb99cdf59cb522
- SHA512 71a1abd3cbc0a79bf478279f30f6a8b7a67199d9d265f5b2ed77d881aecca266a2e5852db8db9403911a86639a46fc6c30fff6264a31c1dc2c6cc65061c089c1
- SSDEEP 196608:/Povi/Xn/N1ifxmCLkHgWKO6qw5LPK+Z8XQB4O:/Qv4Xn/N1wdSXZOPqg
- TLSH T15A86F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798FA0A2B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-10-01_ee24f4ae58e92b99349096d412f1bbe2_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-01_ee24f4ae58e92b99349096d412f1bbe2_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-01_ee24f4ae58e92b99349096d412f1bbe2_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 da0a9a20e73419721b41057ce888e9b79f10a6260717892a4620414b091dcb4e
- MD5 ee24f4ae58e92b99349096d412f1bbe2
- SHA1 5d8d4fccf1597595ab6dd323a5eb99cdf59cb522
- SHA512 71a1abd3cbc0a79bf478279f30f6a8b7a67199d9d265f5b2ed77d881aecca266a2e5852db8db9403911a86639a46fc6c30fff6264a31c1dc2c6cc65061c089c1
- SSDEEP 196608:/Povi/Xn/N1ifxmCLkHgWKO6qw5LPK+Z8XQB4O:/Qv4Xn/N1wdSXZOPqg
- TLSH T15A86F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798FA0A2B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE