General
- Target 2026-07-20_80d50dc5c59482d5e339d5d7cbf8ea66_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar
- Size 8.5MB
- Sample260720-xzpgtset7z
- SHA256 14b3c0e3e332b24047a16d9d6367178af286f3b16fbb827185d218b5ad28c276
- MD5 80d50dc5c59482d5e339d5d7cbf8ea66
- SHA1 4742ed8a78a039fa55e4ea9cde24ad561d3bd014
- SHA512 8fb6e7a6fb26b71ecfac2fbd1232942222a548996c24897d88ef7af5e68a7e8670d09631dd87246b40e1d0e6f93fe5f2dd793259b390ae3fecfb02bf5f7b456f
- SSDEEP 196608:j4bnLr9dpoqMP0vicMn/R15OmmpL9HgWKL6ywSLTK+:MbnFd88vDMn/R1AtxXE1T
- TLSH T14996F1369AA01F95F433913403E6C552DA6E7C3A232087CF7398F6962BB32D1547E62D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-20_80d50dc5c59482d5e339d5d7cbf8ea66_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_80d50dc5c59482d5e339d5d7cbf8ea66_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar.exe
Resource
win11ltsc2024-20260710-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_80d50dc5c59482d5e339d5d7cbf8ea66_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar
- Size 8.5MB
- SHA256 14b3c0e3e332b24047a16d9d6367178af286f3b16fbb827185d218b5ad28c276
- MD5 80d50dc5c59482d5e339d5d7cbf8ea66
- SHA1 4742ed8a78a039fa55e4ea9cde24ad561d3bd014
- SHA512 8fb6e7a6fb26b71ecfac2fbd1232942222a548996c24897d88ef7af5e68a7e8670d09631dd87246b40e1d0e6f93fe5f2dd793259b390ae3fecfb02bf5f7b456f
- SSDEEP 196608:j4bnLr9dpoqMP0vicMn/R15OmmpL9HgWKL6ywSLTK+:MbnFd88vDMn/R1AtxXE1T
- TLSH T14996F1369AA01F95F433913403E6C552DA6E7C3A232087CF7398F6962BB32D1547E62D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects KawaiiUnicorn
- Custom signature
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
Executes dropped EXE