General
- Target 2026-07-05_a252c01e82b208b008e4b1c32ed72d57_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar
- Size 13.3MB
- Sample260705-c7lexscv3q
- SHA256 275ae7109882d7d0e7ffe3bc1a1d2d68ef1609a3ad1cc5e28df22cb6d4143315
- MD5 a252c01e82b208b008e4b1c32ed72d57
- SHA1 27354ed2914ff1172b4162b03416342fafc14d25
- SHA512 84750a5b01c2856372b5f99721ec363148ba460dc27a3674b94c010cc8cab9e9103a037b8809ca70edf8d95889f5e66b01ebc0862febd37554bb1e439840935a
- SSDEEP 393216:/GSTJEKUxqnNNbnFd78vDM4/R1AtmTEnT:egtUxgNhL7SMQLgmTw
- TLSH T11DE6AEF68C705652FE3A4C35DEA1AAA48D3578291F90CBCB2915718F63736F7603D288
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-05_a252c01e82b208b008e4b1c32ed72d57_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_a252c01e82b208b008e4b1c32ed72d57_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_a252c01e82b208b008e4b1c32ed72d57_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar
- Size 13.3MB
- SHA256 275ae7109882d7d0e7ffe3bc1a1d2d68ef1609a3ad1cc5e28df22cb6d4143315
- MD5 a252c01e82b208b008e4b1c32ed72d57
- SHA1 27354ed2914ff1172b4162b03416342fafc14d25
- SHA512 84750a5b01c2856372b5f99721ec363148ba460dc27a3674b94c010cc8cab9e9103a037b8809ca70edf8d95889f5e66b01ebc0862febd37554bb1e439840935a
- SSDEEP 393216:/GSTJEKUxqnNNbnFd78vDM4/R1AtmTEnT:egtUxgNhL7SMQLgmTw
- TLSH T11DE6AEF68C705652FE3A4C35DEA1AAA48D3578291F90CBCB2915718F63736F7603D288
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE