General
- Target 2026-06-27_b0e0157f74d4986371089f6294b08f59_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar
- Size 4.9MB
- Sample260629-eekc9sdx5p
- SHA256 f39fd9a6e0d8677a92e3e859cb1d6234f5036fa40dba80c35e9d57c2dee1c4dc
- MD5 b0e0157f74d4986371089f6294b08f59
- SHA1 49a9516636ab4659a4b23d89d05a2577a1af4414
- SHA512 3cee432926c9abbf62401210e4f04dd6112001c785740f7d09d80e4d07e40f968ca36f06d8d662264d5866f6c029f91df783b08d9213a8aa19b4e78c316339d0
- SSDEEP 98304:EPcisBcCqzCtDWq/Ri6pLfm3KyMc0V3qHgWKuu/fimSNw:EPcvi/Mn/R15fm6pV6HgWKLyNw
- TLSH T1E436E038E9A41ED4F033F2344A51D511E2A57C7A63108BCF27D9A60A2B337F1657EB1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-06-27_b0e0157f74d4986371089f6294b08f59_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_b0e0157f74d4986371089f6294b08f59_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar.exe
Resource
win11ltsc2024-20260618-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_b0e0157f74d4986371089f6294b08f59_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar
- Size 4.9MB
- SHA256 f39fd9a6e0d8677a92e3e859cb1d6234f5036fa40dba80c35e9d57c2dee1c4dc
- MD5 b0e0157f74d4986371089f6294b08f59
- SHA1 49a9516636ab4659a4b23d89d05a2577a1af4414
- SHA512 3cee432926c9abbf62401210e4f04dd6112001c785740f7d09d80e4d07e40f968ca36f06d8d662264d5866f6c029f91df783b08d9213a8aa19b4e78c316339d0
- SSDEEP 98304:EPcisBcCqzCtDWq/Ri6pLfm3KyMc0V3qHgWKuu/fimSNw:EPcvi/Mn/R15fm6pV6HgWKLyNw
- TLSH T1E436E038E9A41ED4F033F2344A51D511E2A57C7A63108BCF27D9A60A2B337F1657EB1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Drops file in System32 directory