General
- Target 2026-07-30_e6f925fb588e0a5c62e801613470ae72_agent-tesla_elex_glassworm_icedid_loki-bot_njrat
- Size 4.4MB
- Sample260730-fe484scq51
- SHA256 e5d5d3f88d30496994835a0e60731e84745ec9e86540e51f39f6f44a0c139bfd
- MD5 e6f925fb588e0a5c62e801613470ae72
- SHA1 faa9e839fdc5fd583b4ba7064d0d88a2d0add328
- SHA512 0c8cf06ab210a1b26d49479d24ae0eed52280ddb93e96f5513901a534b00c3dfd20b8f595c0fd8b9bb82e428280268efbc33e9b81a2a6e844e45d73197c55c99
- SSDEEP 98304:EJ0isBcCqzCtDWq/Ri6+LfmDKyMc0i2CHgWKu2/TiF:EJ0vi/Mn/R18fmmpi7HgWKDm
- TLSH T17E26E039A9A41FD0F133B2340661D551E1A5BD7A63108BCF27D9B60A27337F160BFA1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-30_e6f925fb588e0a5c62e801613470ae72_agent-tesla_elex_glassworm_icedid_loki-bot_njrat.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_e6f925fb588e0a5c62e801613470ae72_agent-tesla_elex_glassworm_icedid_loki-bot_njrat.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_e6f925fb588e0a5c62e801613470ae72_agent-tesla_elex_glassworm_icedid_loki-bot_njrat
- Size 4.4MB
- SHA256 e5d5d3f88d30496994835a0e60731e84745ec9e86540e51f39f6f44a0c139bfd
- MD5 e6f925fb588e0a5c62e801613470ae72
- SHA1 faa9e839fdc5fd583b4ba7064d0d88a2d0add328
- SHA512 0c8cf06ab210a1b26d49479d24ae0eed52280ddb93e96f5513901a534b00c3dfd20b8f595c0fd8b9bb82e428280268efbc33e9b81a2a6e844e45d73197c55c99
- SSDEEP 98304:EJ0isBcCqzCtDWq/Ri6+LfmDKyMc0i2CHgWKu2/TiF:EJ0vi/Mn/R18fmmpi7HgWKDm
- TLSH T17E26E039A9A41FD0F133B2340661D551E1A5BD7A63108BCF27D9B60A27337F160BFA1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE