General
- Target 2026-07-31_03b76658184372ce98a5de69d7b00f0c_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar
- Size 10.5MB
- Sample260731-prb8jaaf75
- SHA256 78bd8009ece4bc38004d17df7016e225d392383bbb2b3dd0bf5485ecc6d58f55
- MD5 03b76658184372ce98a5de69d7b00f0c
- SHA1 83a8d13cfb499b8e3aa1c355cd2c3b2a8ae5b463
- SHA512 f7ae5ff333d7a2205274852185099509ed6a45487b8507fcd2a3b6dbd5be69b31e2de79ec8986da9aff56f53d5b5febc0b9ec628db9fd689692da40daf52740f
- SSDEEP 196608:7TJ1GKUxq8Y8fc4pbnLr9YppqMP0vicMn/R15OmmpLZHgKKL6/w7LTK+:vJEKUxq8tjbnFY78vDMn/R1At1TEBT
- TLSH T10AB6F1369AA01F95F833913403A6C552DA6E7C3A632047CF779CF64A2BB32D1147E61E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-31_03b76658184372ce98a5de69d7b00f0c_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_03b76658184372ce98a5de69d7b00f0c_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_03b76658184372ce98a5de69d7b00f0c_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar
- Size 10.5MB
- SHA256 78bd8009ece4bc38004d17df7016e225d392383bbb2b3dd0bf5485ecc6d58f55
- MD5 03b76658184372ce98a5de69d7b00f0c
- SHA1 83a8d13cfb499b8e3aa1c355cd2c3b2a8ae5b463
- SHA512 f7ae5ff333d7a2205274852185099509ed6a45487b8507fcd2a3b6dbd5be69b31e2de79ec8986da9aff56f53d5b5febc0b9ec628db9fd689692da40daf52740f
- SSDEEP 196608:7TJ1GKUxq8Y8fc4pbnLr9YppqMP0vicMn/R15OmmpLZHgKKL6/w7LTK+:vJEKUxq8tjbnFY78vDMn/R1At1TEBT
- TLSH T10AB6F1369AA01F95F833913403A6C552DA6E7C3A632047CF779CF64A2BB32D1147E61E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE