General
- Target 2026-06-27_a1f83665594a070a68c57a22925d2a12_agent-tesla_elex_glassworm_icedid_loki-bot_njrat
- Size 4.5MB
- Sample260629-e23hcscz9z
- SHA256 febb453347745b9fffe31cd75f64f3f90b790a7206f38f61cf6f8d76c1b9f649
- MD5 a1f83665594a070a68c57a22925d2a12
- SHA1 12bbf3ceef1555f051f024841fa6ebc659d287b1
- SHA512 166718a791422f570d53cf213739a442abd704cb3401df84adce0a0f0198f7fb91f98db62a48d8f82500c9b18bfc8ac0d67d91cdb761048cb155f6883991ae84
- SSDEEP 98304:EP0isBcCqYCtDWq/Ri6pLfmDKyMc0L2qHgWKuu/yim/:EP0vicMn/R15fmmpLDHgWKLg
- TLSH T11226E03999A41FD4F133B2340661D451E1A5BD7A63108BCF27D9B60A2B337F160BFA1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-06-27_a1f83665594a070a68c57a22925d2a12_agent-tesla_elex_glassworm_icedid_loki-bot_njrat.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_a1f83665594a070a68c57a22925d2a12_agent-tesla_elex_glassworm_icedid_loki-bot_njrat.exe
Resource
win11ltsc2024-20260618-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_a1f83665594a070a68c57a22925d2a12_agent-tesla_elex_glassworm_icedid_loki-bot_njrat
- Size 4.5MB
- SHA256 febb453347745b9fffe31cd75f64f3f90b790a7206f38f61cf6f8d76c1b9f649
- MD5 a1f83665594a070a68c57a22925d2a12
- SHA1 12bbf3ceef1555f051f024841fa6ebc659d287b1
- SHA512 166718a791422f570d53cf213739a442abd704cb3401df84adce0a0f0198f7fb91f98db62a48d8f82500c9b18bfc8ac0d67d91cdb761048cb155f6883991ae84
- SSDEEP 98304:EP0isBcCqYCtDWq/Ri6pLfmDKyMc0L2qHgWKuu/yim/:EP0vicMn/R15fmmpLDHgWKLg
- TLSH T11226E03999A41FD4F133B2340661D451E1A5BD7A63108BCF27D9B60A2B337F160BFA1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE