General
- Target 2026-07-20_e1ee86a70a54d2b034fba1ccffde12ff_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar
- Size 8.5MB
- Sample260720-vcbw4sat6w
- SHA256 910f3d01e8182cdaa132d69e336ef6c0c8772d7eeec460df1c1162ad1af394d3
- MD5 e1ee86a70a54d2b034fba1ccffde12ff
- SHA1 784fbe0165deea7d193804ded25f9181d25e91b2
- SHA512 2c8993aaba2dcffbeb8dcc5994083f5e5c8aa3ad4add6cfcf0e49f3d44475c32024b8fbb7093e9d9f825588011336bb3d32af2aab061588e1a2aa665026e1ff1
- SSDEEP 196608:SnbnLr9dppqMPjvicM3/V15OmmpLdHgKKLVqwSLTK+:MbnFd7rvDM3/V1AtpTE0T
- TLSH T15E96F1369AA01F95F433913403E6C552DA6E7C3A232087CF7398F6962BB32D1547E62D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-20_e1ee86a70a54d2b034fba1ccffde12ff_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_e1ee86a70a54d2b034fba1ccffde12ff_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_e1ee86a70a54d2b034fba1ccffde12ff_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar
- Size 8.5MB
- SHA256 910f3d01e8182cdaa132d69e336ef6c0c8772d7eeec460df1c1162ad1af394d3
- MD5 e1ee86a70a54d2b034fba1ccffde12ff
- SHA1 784fbe0165deea7d193804ded25f9181d25e91b2
- SHA512 2c8993aaba2dcffbeb8dcc5994083f5e5c8aa3ad4add6cfcf0e49f3d44475c32024b8fbb7093e9d9f825588011336bb3d32af2aab061588e1a2aa665026e1ff1
- SSDEEP 196608:SnbnLr9dppqMPjvicM3/V15OmmpLdHgKKLVqwSLTK+:MbnFd7rvDM3/V1AtpTE0T
- TLSH T15E96F1369AA01F95F433913403E6C552DA6E7C3A232087CF7398F6962BB32D1547E62D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE