General
- Target 2026-07-22_d0864080240b867ce56d73cc217ab3f8_agent-tesla_elex_glassworm_icedid_loki-bot_njrat
- Size 9.3MB
- Sample260722-vhn4madl2s
- SHA256 ce6ba2086597b2b63ecafb667c05ce1519078ca1aa5aa24470abacf11da92cb6
- MD5 d0864080240b867ce56d73cc217ab3f8
- SHA1 32065fb5c73d79c26748bd4bb643ac925cb2905c
- SHA512 f97fb1efa96c70a779cbf7da6ec61c05b5f906ad2b5810e364fc124b13a010589a7a57844614b183904147dbc2a6bfc78e95f265addb238e3e952331e9913422
- SSDEEP 196608:NjJ15KUxqnYKfcLibnLD9dppq/F0ri/mn/Ry5fmmpLDHgWvL:RJbKUxqnvdbntdYWr4mn/RyFtnXz
- TLSH T142A6F0368AA02F95F823513403E6C551DA2E7C3A632047CF775CFA4A2BB36D6147E61E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-22_d0864080240b867ce56d73cc217ab3f8_agent-tesla_elex_glassworm_icedid_loki-bot_njrat.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-22_d0864080240b867ce56d73cc217ab3f8_agent-tesla_elex_glassworm_icedid_loki-bot_njrat.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_d0864080240b867ce56d73cc217ab3f8_agent-tesla_elex_glassworm_icedid_loki-bot_njrat
- Size 9.3MB
- SHA256 ce6ba2086597b2b63ecafb667c05ce1519078ca1aa5aa24470abacf11da92cb6
- MD5 d0864080240b867ce56d73cc217ab3f8
- SHA1 32065fb5c73d79c26748bd4bb643ac925cb2905c
- SHA512 f97fb1efa96c70a779cbf7da6ec61c05b5f906ad2b5810e364fc124b13a010589a7a57844614b183904147dbc2a6bfc78e95f265addb238e3e952331e9913422
- SSDEEP 196608:NjJ15KUxqnYKfcLibnLD9dppq/F0ri/mn/Ry5fmmpLDHgWvL:RJbKUxqnvdbntdYWr4mn/RyFtnXz
- TLSH T142A6F0368AA02F95F823513403E6C551DA2E7C3A632047CF775CFA4A2BB36D6147E61E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE