General
- Target 2026-07-15_b67a949fc35192e9e79a53decc4df3ba_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar
- Size 4.9MB
- Sample260715-raecnsdz4p
- SHA256 2dab179c30fd8812bd685e61b8b80d7de9a579df92c628d0072e3e4e0390fb56
- MD5 b67a949fc35192e9e79a53decc4df3ba
- SHA1 952de1c8a633fd1091cac7a03245bc92b66cb653
- SHA512 744d5ccb4b2b6701305b05ebf316d1796ac4afcb29e734650bf127dac37982af7d08109f6d345871919d863367432e6a2870f38405e0c0faa1c9397952bf6171
- SSDEEP 98304:nP0isCcCVzCLDWq5Ri6pLfmDKTMc0LOqHg6Kuu/n/mSEw:nP0v1aCn5R15fmm2L7Hg6KLZEw
- TLSH T15036E038E9A41ED4F033F2344A51D511E2A57C7A63108BCF27D9A60A2B337F1657EB1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-15_b67a949fc35192e9e79a53decc4df3ba_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_b67a949fc35192e9e79a53decc4df3ba_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_b67a949fc35192e9e79a53decc4df3ba_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar
- Size 4.9MB
- SHA256 2dab179c30fd8812bd685e61b8b80d7de9a579df92c628d0072e3e4e0390fb56
- MD5 b67a949fc35192e9e79a53decc4df3ba
- SHA1 952de1c8a633fd1091cac7a03245bc92b66cb653
- SHA512 744d5ccb4b2b6701305b05ebf316d1796ac4afcb29e734650bf127dac37982af7d08109f6d345871919d863367432e6a2870f38405e0c0faa1c9397952bf6171
- SSDEEP 98304:nP0isCcCVzCLDWq5Ri6pLfmDKTMc0LOqHg6Kuu/n/mSEw:nP0v1aCn5R15fmm2L7Hg6KLZEw
- TLSH T15036E038E9A41ED4F033F2344A51D511E2A57C7A63108BCF27D9A60A2B337F1657EB1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects KawaiiUnicorn
- Custom signature
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
Executes dropped EXE