General
- Target 2026-07-03_b5c9bd2224afbb188bb83293f26a9bc7_agent-tesla_elex_glassworm_icedid_loki-bot_njrat
- Size 12.3MB
- Sample260703-q73wvsft9l
- SHA256 0befb2fd01f0e0472b5d6189f049194b88695236e70d3e7c2c40b9ea3cc284d8
- MD5 b5c9bd2224afbb188bb83293f26a9bc7
- SHA1 96feff35b3483c1aa1a3ddaeaf42f1f3f296c0f1
- SHA512 0d1192ef5c31c8ccc896d9995d50b93af8f4cee66522175eb9a40c28336dcc179423ead156ee0c807728d9c48866368f92cf16679f021a517cc72e741b5d12c4
- SSDEEP 196608:8+9aGx6jJ1GKUxqnYKfclNbnLD9dppqMP0vi/Mn/R15fmmpLAHgWKL6R:/wS+JEKUxqnvQbntd78v4Mn/R1Ft+XEe
- TLSH T163D69DF68C305652FE3A4C35DEA1AAA48D3578291F90DBCB2915718F63736F7603D288
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-03_b5c9bd2224afbb188bb83293f26a9bc7_agent-tesla_elex_glassworm_icedid_loki-bot_njrat.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-03_b5c9bd2224afbb188bb83293f26a9bc7_agent-tesla_elex_glassworm_icedid_loki-bot_njrat.exe
Resource
win11ltsc2024-20260629-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_b5c9bd2224afbb188bb83293f26a9bc7_agent-tesla_elex_glassworm_icedid_loki-bot_njrat
- Size 12.3MB
- SHA256 0befb2fd01f0e0472b5d6189f049194b88695236e70d3e7c2c40b9ea3cc284d8
- MD5 b5c9bd2224afbb188bb83293f26a9bc7
- SHA1 96feff35b3483c1aa1a3ddaeaf42f1f3f296c0f1
- SHA512 0d1192ef5c31c8ccc896d9995d50b93af8f4cee66522175eb9a40c28336dcc179423ead156ee0c807728d9c48866368f92cf16679f021a517cc72e741b5d12c4
- SSDEEP 196608:8+9aGx6jJ1GKUxqnYKfclNbnLD9dppqMP0vi/Mn/R15fmmpLAHgWKL6R:/wS+JEKUxqnvQbntd78v4Mn/R1Ft+XEe
- TLSH T163D69DF68C305652FE3A4C35DEA1AAA48D3578291F90DBCB2915718F63736F7603D288
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE