General
- Target 2026-07-30_1019ad9b60707471daed185749981a33_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar
- Size 4.9MB
- Sample260730-q682gsbl61
- SHA256 034875af824537404fd5d78f29ced57e469c3bd37458362491f67750f029e152
- MD5 1019ad9b60707471daed185749981a33
- SHA1 5a04a746e038f83e889de6d8152e727fea7e0c96
- SHA512 c97cce02854310a57e2767015b5602dbc886a00bb4cd2150d17c30e63a1989334af6aac098a1b2cc0f94fa4bcb70937f668fb3802331ed7b535495acc64dead2
- SSDEEP 98304:EvUTsBcCqzC8DWq/Yi6pLfnDMyMc0LPpHgWKuu/Rim6qw:EvUgi/vn/Y15fnYpLBHgWKLoqw
- TLSH T19B36E038E9A41ED4F033F2344A51D511E2A57C7A63108BCF27D9A60A2B337F1657EB1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-30_1019ad9b60707471daed185749981a33_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_1019ad9b60707471daed185749981a33_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_1019ad9b60707471daed185749981a33_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar
- Size 4.9MB
- SHA256 034875af824537404fd5d78f29ced57e469c3bd37458362491f67750f029e152
- MD5 1019ad9b60707471daed185749981a33
- SHA1 5a04a746e038f83e889de6d8152e727fea7e0c96
- SHA512 c97cce02854310a57e2767015b5602dbc886a00bb4cd2150d17c30e63a1989334af6aac098a1b2cc0f94fa4bcb70937f668fb3802331ed7b535495acc64dead2
- SSDEEP 98304:EvUTsBcCqzC8DWq/Yi6pLfnDMyMc0LPpHgWKuu/Rim6qw:EvUgi/vn/Y15fnYpLBHgWKLoqw
- TLSH T19B36E038E9A41ED4F033F2344A51D511E2A57C7A63108BCF27D9A60A2B337F1657EB1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE