General
- Target 2026-07-17_30dfe8e2c36f730276600269eb80cdd3_agent-tesla_elex_glassworm_icedid_loki-bot_njrat
- Size 12.0MB
- Sample260717-vsx5aagw2q
- SHA256 98d4f469758352a025a6e0a03ef5734075a5b9e89e6f3d7d522bda4e16579c36
- MD5 30dfe8e2c36f730276600269eb80cdd3
- SHA1 79d9ce2e00acb67c62bd9a6672ad80f915d3c1d7
- SHA512 8052e3abef656ac2ea023f78e25913e590b0715ef5a44a62f90ee44994f7f4ffa9458d6329d8087ec46df38997a52b787bd48d964f0a939f4b4014906dfb07a1
- SSDEEP 196608:8bWVGw6+J1GKUxqnYKfclNbnL9sLppqMJ0vi/Mn/R18fmmpiDHgWKDy:KwbDJEKUxqnvQbn2L7qv4Mn/R1etGXcy
- TLSH T12DC69DF68C305652FE3A4C35DEA1AAA48D35B8291F90DBCB2915718F63736F7603D188
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-17_30dfe8e2c36f730276600269eb80cdd3_agent-tesla_elex_glassworm_icedid_loki-bot_njrat.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_30dfe8e2c36f730276600269eb80cdd3_agent-tesla_elex_glassworm_icedid_loki-bot_njrat.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_30dfe8e2c36f730276600269eb80cdd3_agent-tesla_elex_glassworm_icedid_loki-bot_njrat
- Size 12.0MB
- SHA256 98d4f469758352a025a6e0a03ef5734075a5b9e89e6f3d7d522bda4e16579c36
- MD5 30dfe8e2c36f730276600269eb80cdd3
- SHA1 79d9ce2e00acb67c62bd9a6672ad80f915d3c1d7
- SHA512 8052e3abef656ac2ea023f78e25913e590b0715ef5a44a62f90ee44994f7f4ffa9458d6329d8087ec46df38997a52b787bd48d964f0a939f4b4014906dfb07a1
- SSDEEP 196608:8bWVGw6+J1GKUxqnYKfclNbnL9sLppqMJ0vi/Mn/R18fmmpiDHgWKDy:KwbDJEKUxqnvQbn2L7qv4Mn/R1etGXcy
- TLSH T12DC69DF68C305652FE3A4C35DEA1AAA48D35B8291F90DBCB2915718F63736F7603D188
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects KawaiiUnicorn
- Custom signature
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE