General
- Target 2026-07-30_9dc948b42d98da143fa6b63ed64bab15_agent-tesla_elex_glassworm_icedid_loki-bot_njrat
- Size 4.4MB
- Sample260730-dmwkts1zcs
- SHA256 31f7965ebae2379f2caa92b165a4998976fa8462304b5424da0c882acc5eae88
- MD5 9dc948b42d98da143fa6b63ed64bab15
- SHA1 afdd63989d821b6a3a8fd28657945e57cfa9fd1f
- SHA512 e552000bfba6296743e11a14cfdfa55a4e10c79053608b0c7801acfb6a7965cd83c91caa8ff09adee921ee75c72ec1c00ec5d9b55b24835bd33504ffa699fa6d
- SSDEEP 98304:EJ0isBcCqzCtDWq/Ri6pLfmDKyMc0i2qHg+lu2/Ti9:EJ0vi/Mn/R15fmmpiDHg+lD2
- TLSH T12526E039A9A41FD0F133B2340661D551E1A5BD7A63108BCF27D9B60A27337F160BFA1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-30_9dc948b42d98da143fa6b63ed64bab15_agent-tesla_elex_glassworm_icedid_loki-bot_njrat.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_9dc948b42d98da143fa6b63ed64bab15_agent-tesla_elex_glassworm_icedid_loki-bot_njrat.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_9dc948b42d98da143fa6b63ed64bab15_agent-tesla_elex_glassworm_icedid_loki-bot_njrat
- Size 4.4MB
- SHA256 31f7965ebae2379f2caa92b165a4998976fa8462304b5424da0c882acc5eae88
- MD5 9dc948b42d98da143fa6b63ed64bab15
- SHA1 afdd63989d821b6a3a8fd28657945e57cfa9fd1f
- SHA512 e552000bfba6296743e11a14cfdfa55a4e10c79053608b0c7801acfb6a7965cd83c91caa8ff09adee921ee75c72ec1c00ec5d9b55b24835bd33504ffa699fa6d
- SSDEEP 98304:EJ0isBcCqzCtDWq/Ri6pLfmDKyMc0i2qHg+lu2/Ti9:EJ0vi/Mn/R15fmmpiDHg+lD2
- TLSH T12526E039A9A41FD0F133B2340661D551E1A5BD7A63108BCF27D9B60A27337F160BFA1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Drops file in System32 directory