General
- Target 2026-07-31_4d499df5c39ab9d33930ff5a58a36ca1_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar
- Size 4.9MB
- Sample260731-rxh95shr9s
- SHA256 78365f59eb438bb4742eb8bd0b93dad5f8b9416ce47b1b1ff288a96694cdc398
- MD5 4d499df5c39ab9d33930ff5a58a36ca1
- SHA1 25b36b1ad207023adf536dc79a6a8271c3bd6797
- SHA512 5d99d88072f4c0b9ad01f8d8998c94b4bd614720c233c9f72b9f036e1aae9f29db016a9ba07c92e2e41328ff9850526e66beeff58000b21f4801f26b27b7332f
- SSDEEP 98304:EPyisBcCqzCUDWq/ei6pffZbKyMc0LIqHg4Kuu2TimSqw:EPyvi/3n/e11fZOpLhHg4KLBqw
- TLSH T16836E038E9A41ED4F033F2344A51D511E2A57C7A63108BCF27D9A60A2B337F1657EB1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-31_4d499df5c39ab9d33930ff5a58a36ca1_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_4d499df5c39ab9d33930ff5a58a36ca1_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_4d499df5c39ab9d33930ff5a58a36ca1_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar
- Size 4.9MB
- SHA256 78365f59eb438bb4742eb8bd0b93dad5f8b9416ce47b1b1ff288a96694cdc398
- MD5 4d499df5c39ab9d33930ff5a58a36ca1
- SHA1 25b36b1ad207023adf536dc79a6a8271c3bd6797
- SHA512 5d99d88072f4c0b9ad01f8d8998c94b4bd614720c233c9f72b9f036e1aae9f29db016a9ba07c92e2e41328ff9850526e66beeff58000b21f4801f26b27b7332f
- SSDEEP 98304:EPyisBcCqzCUDWq/ei6pffZbKyMc0LIqHg4Kuu2TimSqw:EPyvi/3n/e11fZOpLhHg4KLBqw
- TLSH T16836E038E9A41ED4F033F2344A51D511E2A57C7A63108BCF27D9A60A2B337F1657EB1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE