General
- Target 2026-07-27_fe78ae2daa390a35dd198afc3c060b41_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar
- Size 4.9MB
- Sample260728-aabs4stdrh
- SHA256 bb18bbc5330865d058d5a40af76f0cf80c61f3d35957caa1a106292016369046
- MD5 fe78ae2daa390a35dd198afc3c060b41
- SHA1 9967aa3f645eba784495bf9b21343bc2e0b3a91c
- SHA512 c857d6a2c88e7e211e35e78a7b43b9315fd637566e7ce03d3c5c568e12e2b471963f79cb0a12774a1a63b4db495097c11c943ccb8f32e887bd0eb30eeb88e712
- SSDEEP 98304:Ex6isBcCqzC8DWq//i6pLfmDKyMb0LoqHBWKuu/nimSEw:Ex6vi/vn//15fmmmLBHBWKL6Ew
- TLSH T11236E038E9A41ED4F033F2344A51D511E2A57C7A63108BCF27D9A60A2B337F1657EB1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-27_fe78ae2daa390a35dd198afc3c060b41_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_fe78ae2daa390a35dd198afc3c060b41_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_fe78ae2daa390a35dd198afc3c060b41_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar
- Size 4.9MB
- SHA256 bb18bbc5330865d058d5a40af76f0cf80c61f3d35957caa1a106292016369046
- MD5 fe78ae2daa390a35dd198afc3c060b41
- SHA1 9967aa3f645eba784495bf9b21343bc2e0b3a91c
- SHA512 c857d6a2c88e7e211e35e78a7b43b9315fd637566e7ce03d3c5c568e12e2b471963f79cb0a12774a1a63b4db495097c11c943ccb8f32e887bd0eb30eeb88e712
- SSDEEP 98304:Ex6isBcCqzC8DWq//i6pLfmDKyMb0LoqHBWKuu/nimSEw:Ex6vi/vn//15fmmmLBHBWKL6Ew
- TLSH T11236E038E9A41ED4F033F2344A51D511E2A57C7A63108BCF27D9A60A2B337F1657EB1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE