General
- Target 2026-07-14_0e0db916dfcd330325061b95ddd3e3d1_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar
- Size 5.7MB
- Sample260715-bj5cfsbw4s
- SHA256 f87ad79a985e7992f60bd087b0327371848e655f59b071770ef05757b1fa6e5c
- MD5 0e0db916dfcd330325061b95ddd3e3d1
- SHA1 25ea166d08a174867f44a72765eb56a942c8b9dc
- SHA512 4a369e77432d30cda1900fde72edfcfbc138a9b1c1594fdd7e5eb8305411d5c2e7ca9881c74d611ec97689352af2b27e9377122c9873be2d8d5804c46e9416ba
- SSDEEP 98304:EPzisBcXqzCtDQq/Ri6vLOmDKyMg0LEqHgKKuu/nimUqwZmogLRhK+:EPzvicMB/R1TOmmNLlHgKKLcqwSLTK+
- TLSH T10B56F139E9A41ED4F033F2344661D411E2A57C7A63108BCF27D9A60A2B337F1657FA1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-14_0e0db916dfcd330325061b95ddd3e3d1_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_0e0db916dfcd330325061b95ddd3e3d1_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_0e0db916dfcd330325061b95ddd3e3d1_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar
- Size 5.7MB
- SHA256 f87ad79a985e7992f60bd087b0327371848e655f59b071770ef05757b1fa6e5c
- MD5 0e0db916dfcd330325061b95ddd3e3d1
- SHA1 25ea166d08a174867f44a72765eb56a942c8b9dc
- SHA512 4a369e77432d30cda1900fde72edfcfbc138a9b1c1594fdd7e5eb8305411d5c2e7ca9881c74d611ec97689352af2b27e9377122c9873be2d8d5804c46e9416ba
- SSDEEP 98304:EPzisBcXqzCtDQq/Ri6vLOmDKyMg0LEqHgKKuu/nimUqwZmogLRhK+:EPzvicMB/R1TOmmNLlHgKKLcqwSLTK+
- TLSH T10B56F139E9A41ED4F033F2344661D411E2A57C7A63108BCF27D9A60A2B337F1657FA1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects KawaiiUnicorn
- Custom signature
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
Executes dropped EXE