General
- Target 2026-07-23_dd4b614ff4ba4857216cdd02ac66f50e_agent-tesla_elex_glassworm_icedid_loki-bot_njrat
- Size 4.5MB
- Sample260723-lrfzyavfja
- SHA256 13c532b0f47c319a4928bd6a58389bdba0922f6ead5cea26f7a4f7189b4bf5b4
- MD5 dd4b614ff4ba4857216cdd02ac66f50e
- SHA1 1036744870d5cb6a47a022ef221ed9f386b3f21c
- SHA512 a203239fe7060eddeeac3c959e13c5997e71be197b68e7edc07ee7e3a6d4a08645d380581d58c74f05d2c6480e92445aef3b414689a44715342140853d0c1bb7
- SSDEEP 98304:EP0isBcCqYCtDWq/Ri6pLfmDKyMc0LaqHgrKuu/yim:EP0vicMn/R15fmmpLvHgrKL
- TLSH T1E526E03999A41FD4F133B2340661D451E1A5BD7A63108BCF27D9B60A2B337F160BFA1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-23_dd4b614ff4ba4857216cdd02ac66f50e_agent-tesla_elex_glassworm_icedid_loki-bot_njrat.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_dd4b614ff4ba4857216cdd02ac66f50e_agent-tesla_elex_glassworm_icedid_loki-bot_njrat.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_dd4b614ff4ba4857216cdd02ac66f50e_agent-tesla_elex_glassworm_icedid_loki-bot_njrat
- Size 4.5MB
- SHA256 13c532b0f47c319a4928bd6a58389bdba0922f6ead5cea26f7a4f7189b4bf5b4
- MD5 dd4b614ff4ba4857216cdd02ac66f50e
- SHA1 1036744870d5cb6a47a022ef221ed9f386b3f21c
- SHA512 a203239fe7060eddeeac3c959e13c5997e71be197b68e7edc07ee7e3a6d4a08645d380581d58c74f05d2c6480e92445aef3b414689a44715342140853d0c1bb7
- SSDEEP 98304:EP0isBcCqYCtDWq/Ri6pLfmDKyMc0LaqHgrKuu/yim:EP0vicMn/R15fmmpLvHgrKL
- TLSH T1E526E03999A41FD4F133B2340661D451E1A5BD7A63108BCF27D9B60A2B337F160BFA1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE