General
- Target 2026-07-11_d16747b0560a90c6c33cb89e2db0b742_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar
- Size 4.9MB
- Sample260711-gfalkaew4z
- SHA256 628b5f8bdeb708731f24e2dadaf483f356f97b4343f48e5d61ac3de16b32f4f6
- MD5 d16747b0560a90c6c33cb89e2db0b742
- SHA1 edd4f8820f06fe28a4e117e7369e54057ca94435
- SHA512 436fe9cc787153e208d92797bb470b9ff327e9e61a878a7fbefb1292ce9c8bc3fd8da2b7a402929b6fd66707177da87fdade19e96001fcab029fa17606cfae90
- SSDEEP 98304:EP0isBcCqzCtDWq/Fi6pLHmDKyM70LpqHgWKuu/nimSdw:EP0vi/Mn/F15HmmSL4HgWKL6dw
- TLSH T17936E038E9A41ED4F033F2344A51D511E2A57C7A63108BCF27D9A60A2B337F1657EB1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-11_d16747b0560a90c6c33cb89e2db0b742_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-11_d16747b0560a90c6c33cb89e2db0b742_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_d16747b0560a90c6c33cb89e2db0b742_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar
- Size 4.9MB
- SHA256 628b5f8bdeb708731f24e2dadaf483f356f97b4343f48e5d61ac3de16b32f4f6
- MD5 d16747b0560a90c6c33cb89e2db0b742
- SHA1 edd4f8820f06fe28a4e117e7369e54057ca94435
- SHA512 436fe9cc787153e208d92797bb470b9ff327e9e61a878a7fbefb1292ce9c8bc3fd8da2b7a402929b6fd66707177da87fdade19e96001fcab029fa17606cfae90
- SSDEEP 98304:EP0isBcCqzCtDWq/Fi6pLHmDKyM70LpqHgWKuu/nimSdw:EP0vi/Mn/F15HmmSL4HgWKL6dw
- TLSH T17936E038E9A41ED4F033F2344A51D511E2A57C7A63108BCF27D9A60A2B337F1657EB1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects KawaiiUnicorn
- Custom signature
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
Executes dropped EXE