General
- Target 2026-07-16_c594d24c7789ea2c2768917431d88572_agent-tesla_elex_glassworm_icedid_loki-bot_njrat
- Size 12.0MB
- Sample260716-ncpdwabs8r
- SHA256 6f3a39b1aeb61eca20b1259dc445a19b59c22b9308569fa1a6318db0f09f2c17
- MD5 c594d24c7789ea2c2768917431d88572
- SHA1 2494df18193db7284a117906aaf4ac489674b62e
- SHA512 a086a4aaf4bfbe0ddae8b8abb560b5bb1bb27c7d35f3ccfd04f551bd5ff93e1cb04ce7dbbff9b7e04225e9fbc3cba8dbb605ae3701fbe9ea2617a18ff7e739bf
- SSDEEP 196608:8bWyGw6rJ1GKUxqnYKfcWNbnL9/LppqMJ0pi/Mn/R15fmmpiDHg+KDm:KHbWJEKUxqnvZbnJL7qp4Mn/R1FtG/cm
- TLSH T1E5C69DF68C305652FE3A4C35DEA1AAA48D35B8291F90DBCB2915718F63736F7603D188
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-16_c594d24c7789ea2c2768917431d88572_agent-tesla_elex_glassworm_icedid_loki-bot_njrat.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-16_c594d24c7789ea2c2768917431d88572_agent-tesla_elex_glassworm_icedid_loki-bot_njrat.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-16_c594d24c7789ea2c2768917431d88572_agent-tesla_elex_glassworm_icedid_loki-bot_njrat
- Size 12.0MB
- SHA256 6f3a39b1aeb61eca20b1259dc445a19b59c22b9308569fa1a6318db0f09f2c17
- MD5 c594d24c7789ea2c2768917431d88572
- SHA1 2494df18193db7284a117906aaf4ac489674b62e
- SHA512 a086a4aaf4bfbe0ddae8b8abb560b5bb1bb27c7d35f3ccfd04f551bd5ff93e1cb04ce7dbbff9b7e04225e9fbc3cba8dbb605ae3701fbe9ea2617a18ff7e739bf
- SSDEEP 196608:8bWyGw6rJ1GKUxqnYKfcWNbnL9/LppqMJ0pi/Mn/R15fmmpiDHg+KDm:KHbWJEKUxqnvZbnJL7qp4Mn/R1FtG/cm
- TLSH T1E5C69DF68C305652FE3A4C35DEA1AAA48D35B8291F90DBCB2915718F63736F7603D188
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE