General
- Target 2026-07-15_8035cea1ebfd0309998a85b1f00ef264_agent-tesla_elex_glassworm_icedid_loki-bot_njrat
- Size 9.3MB
- Sample260715-c2eeescy6v
- SHA256 0b8299c20c9cfada698fc346dc0861fd755fe056bd37c80104ef15858e039ab3
- MD5 8035cea1ebfd0309998a85b1f00ef264
- SHA1 f3a9e8d280527f5228ebfd7b2a330ac1164276cd
- SHA512 0525dccb4d8917734963a9453a4194fcda5788f0e85916b73f99a314d4655b40aac355b5115a609ff8b4abb107363a2b758a72c61a7d46779da512421b758d14
- SSDEEP 196608:N+J1GKUxqnYKfclNbnL99LppqMJ0vi/Mn/R15fmmpiDHgWKDc:EJEKUxqnvQbn7L7qv4Mn/R1FtGXcc
- TLSH T1EBA6F1368AA02F85F823513403E6C551DA2E7D3A632047CF775CFA4A2BB36D6147E61E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-15_8035cea1ebfd0309998a85b1f00ef264_agent-tesla_elex_glassworm_icedid_loki-bot_njrat.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_8035cea1ebfd0309998a85b1f00ef264_agent-tesla_elex_glassworm_icedid_loki-bot_njrat.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_8035cea1ebfd0309998a85b1f00ef264_agent-tesla_elex_glassworm_icedid_loki-bot_njrat
- Size 9.3MB
- SHA256 0b8299c20c9cfada698fc346dc0861fd755fe056bd37c80104ef15858e039ab3
- MD5 8035cea1ebfd0309998a85b1f00ef264
- SHA1 f3a9e8d280527f5228ebfd7b2a330ac1164276cd
- SHA512 0525dccb4d8917734963a9453a4194fcda5788f0e85916b73f99a314d4655b40aac355b5115a609ff8b4abb107363a2b758a72c61a7d46779da512421b758d14
- SSDEEP 196608:N+J1GKUxqnYKfclNbnL99LppqMJ0vi/Mn/R15fmmpiDHgWKDc:EJEKUxqnvQbn7L7qv4Mn/R1FtGXcc
- TLSH T1EBA6F1368AA02F85F823513403E6C551DA2E7D3A632047CF775CFA4A2BB36D6147E61E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE