General
- Target 2026-10-08_2851c5901cdc871dbfc133f409f1bef9_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- Sample261009-xdjpfsc161
- SHA256 f5e2e25209c83fe1f2228c1d85a877f19d2896ad5ac5191587b0ea5d0ce8c5b7
- MD5 2851c5901cdc871dbfc133f409f1bef9
- SHA1 8885e7e4156f00dd87c0671d92139bfd7a7973fe
- SHA512 6beb2ce19d9f7347fe438551f992c70e82e07cfdc7a03ac3d3785af5002b272d62c2137e5b16a96019b34c8f960b3970712445a6bcbb4d96ec08e8c3a4119046
- SSDEEP 196608:/P6viXqO/K1mfBmUL2HgVKTVqD4L+K+ZXY/Bvd:/CvoqO/K1sXkA83+1K
- TLSH T1F286F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A2B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-10-08_2851c5901cdc871dbfc133f409f1bef9_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-08_2851c5901cdc871dbfc133f409f1bef9_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-08_2851c5901cdc871dbfc133f409f1bef9_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_loki-bot_njrat_ramnit_vidar
- Size 8.0MB
- SHA256 f5e2e25209c83fe1f2228c1d85a877f19d2896ad5ac5191587b0ea5d0ce8c5b7
- MD5 2851c5901cdc871dbfc133f409f1bef9
- SHA1 8885e7e4156f00dd87c0671d92139bfd7a7973fe
- SHA512 6beb2ce19d9f7347fe438551f992c70e82e07cfdc7a03ac3d3785af5002b272d62c2137e5b16a96019b34c8f960b3970712445a6bcbb4d96ec08e8c3a4119046
- SSDEEP 196608:/P6viXqO/K1mfBmUL2HgVKTVqD4L+K+ZXY/Bvd:/CvoqO/K1sXkA83+1K
- TLSH T1F286F139E9A01FD4F433A6340661D551D1A97C3E63608BCF2798BA0A2B337E1647FA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE