General
- Target 2026-07-23_5106831a66263f6508b18bf8b52b16b7_agent-tesla_elex_glassworm_icedid_loki-bot_njrat
- Size 7.3MB
- Sample260723-l5kv2sbf26
- SHA256 27a19b8cd2fd11e3887c7d39d83a745a3c616d516bd8a2720b16778b25051cbe
- MD5 5106831a66263f6508b18bf8b52b16b7
- SHA1 4c1e7518f4756b3b85e0dbf63b9148e65ab6aec1
- SHA512 e0a38a520ba74dfa75239bc1e1b4e6d515f0c5cdd3f94a5b3328436ba95c4a8fd39595b0ccc09325c678941dc88636c81b1f578be0a6a18fa7f0de4579af8e01
- SSDEEP 196608:7bbnLJgdppuMP0vicMn/R15fmmpLRHgWKL:Xbnedf8vTMn/R1Ft1XE
- TLSH T11776E0368AA01F95F833913403E6C551DA2E7D3A632047CF7798F6862BB32E5147E62D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-23_5106831a66263f6508b18bf8b52b16b7_agent-tesla_elex_glassworm_icedid_loki-bot_njrat.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_5106831a66263f6508b18bf8b52b16b7_agent-tesla_elex_glassworm_icedid_loki-bot_njrat.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_5106831a66263f6508b18bf8b52b16b7_agent-tesla_elex_glassworm_icedid_loki-bot_njrat
- Size 7.3MB
- SHA256 27a19b8cd2fd11e3887c7d39d83a745a3c616d516bd8a2720b16778b25051cbe
- MD5 5106831a66263f6508b18bf8b52b16b7
- SHA1 4c1e7518f4756b3b85e0dbf63b9148e65ab6aec1
- SHA512 e0a38a520ba74dfa75239bc1e1b4e6d515f0c5cdd3f94a5b3328436ba95c4a8fd39595b0ccc09325c678941dc88636c81b1f578be0a6a18fa7f0de4579af8e01
- SSDEEP 196608:7bbnLJgdppuMP0vicMn/R15fmmpLRHgWKL:Xbnedf8vTMn/R1Ft1XE
- TLSH T11776E0368AA01F95F833913403E6C551DA2E7D3A632047CF7798F6862BB32E5147E62D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects KawaiiUnicorn
- Custom signature
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
Executes dropped EXE