General
- Target 2026-07-20_3b2d959541cbb2dc3a70804737690b31_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar
- Size 10.5MB
- Sample260720-n2matabt7s
- SHA256 385608364aec106be973f0d36225ae4646d6ed7a4ccc6aa794f40a57fc293d94
- MD5 3b2d959541cbb2dc3a70804737690b31
- SHA1 965eb386c4f1a78e3577a2b8881efd17a1be910b
- SHA512 1e13bdd771ca69e9d92f4a6cb1e8f6fc2dafb8e833820660a1435f16e47614a1ec70ad770ac9fba6ec483a17c0b17667876db79503c72e240060cf4cf6aac1db
- SSDEEP 196608:UjJ1GKUxqnY8fc4ibnLr9dppqMP0vicMn/R15OmmdL9HgKKL6qwnLTK+:gJEKUxqntkbnFd78vDMn/R1AZxTEUT
- TLSH T124B6F1369AA01F95F833913403A6C552DA6E7C3A632047CF779CF64A2BB32D1147E61E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-20_3b2d959541cbb2dc3a70804737690b31_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_3b2d959541cbb2dc3a70804737690b31_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_3b2d959541cbb2dc3a70804737690b31_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar
- Size 10.5MB
- SHA256 385608364aec106be973f0d36225ae4646d6ed7a4ccc6aa794f40a57fc293d94
- MD5 3b2d959541cbb2dc3a70804737690b31
- SHA1 965eb386c4f1a78e3577a2b8881efd17a1be910b
- SHA512 1e13bdd771ca69e9d92f4a6cb1e8f6fc2dafb8e833820660a1435f16e47614a1ec70ad770ac9fba6ec483a17c0b17667876db79503c72e240060cf4cf6aac1db
- SSDEEP 196608:UjJ1GKUxqnY8fc4ibnLr9dppqMP0vicMn/R15OmmdL9HgKKL6qwnLTK+:gJEKUxqntkbnFd78vDMn/R1AZxTEUT
- TLSH T124B6F1369AA01F95F833913403A6C552DA6E7C3A632047CF779CF64A2BB32D1147E61E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE