General
- Target 2026-10-02_29f24a1097141ae771f1e2bceb8f75f7_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample261003-sye5js1fpd
- SHA256 e6ba6fbfaebd6ee95d6b6ea6c8e3b336d6b64819a612c75b87f2bf942b1c2948
- MD5 29f24a1097141ae771f1e2bceb8f75f7
- SHA1 1ed93b4e29e930cdc3fc29fd7e9189d1b70cc653
- SHA512 5210e9366d4955a76a14d32d6e0ea858ab6f19b95f1f07bf7729489fc5401358112540891c2d09460f8e0c6774f90fb8731bc0f92f70da2a5591897e796a108a
- SSDEEP 196608:/Povi/Xn/q1GfmmpL7HgWKTLqw5L+K+Z6XjB3P:/Av4Xn/q1MtfX8B+sT
- TLSH T15686F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-10-02_29f24a1097141ae771f1e2bceb8f75f7_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-02_29f24a1097141ae771f1e2bceb8f75f7_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-02_29f24a1097141ae771f1e2bceb8f75f7_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 e6ba6fbfaebd6ee95d6b6ea6c8e3b336d6b64819a612c75b87f2bf942b1c2948
- MD5 29f24a1097141ae771f1e2bceb8f75f7
- SHA1 1ed93b4e29e930cdc3fc29fd7e9189d1b70cc653
- SHA512 5210e9366d4955a76a14d32d6e0ea858ab6f19b95f1f07bf7729489fc5401358112540891c2d09460f8e0c6774f90fb8731bc0f92f70da2a5591897e796a108a
- SSDEEP 196608:/Povi/Xn/q1GfmmpL7HgWKTLqw5L+K+Z6XjB3P:/Av4Xn/q1MtfX8B+sT
- TLSH T15686F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A3B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE