General
- Target 2026-07-15_3733f2eb20f8c5481984841a67899601_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar
- Size 7.7MB
- Sample260716-cgh7waa12k
- SHA256 418d76c52f63456170ef993ee2f7fa98b5cc2c5d533ada25d5037803fe26598b
- MD5 3733f2eb20f8c5481984841a67899601
- SHA1 8c02e92a3560700412e4899dd950138682b7d88b
- SHA512 43a816a1c7668e4cf9469cc5b9a5d9b59e3257a3c12903390ee591b5cd43c280773ac2b8e6f04598ae37557c6b59cf39b1aea9c3a41c282732a64ca9687fe555
- SSDEEP 196608:C2bnLDXz6pqMP0vi/Mn/R15fmmpLOHgWKL6qw:pbnHzQ8v4Mn/R1Ft0XE
- TLSH T1B486F0369AA01F95F433913403E6C551EA2E7C3A232047CF7798F6962BB32E1547E62D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-15_3733f2eb20f8c5481984841a67899601_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_3733f2eb20f8c5481984841a67899601_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_3733f2eb20f8c5481984841a67899601_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar
- Size 7.7MB
- SHA256 418d76c52f63456170ef993ee2f7fa98b5cc2c5d533ada25d5037803fe26598b
- MD5 3733f2eb20f8c5481984841a67899601
- SHA1 8c02e92a3560700412e4899dd950138682b7d88b
- SHA512 43a816a1c7668e4cf9469cc5b9a5d9b59e3257a3c12903390ee591b5cd43c280773ac2b8e6f04598ae37557c6b59cf39b1aea9c3a41c282732a64ca9687fe555
- SSDEEP 196608:C2bnLDXz6pqMP0vi/Mn/R15fmmpLOHgWKL6qw:pbnHzQ8v4Mn/R1Ft0XE
- TLSH T1B486F0369AA01F95F433913403E6C551EA2E7C3A232047CF7798F6962BB32E1547E62D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE