General
- Target 2026-07-31_b895c4ff891996f97b6f3fe6333cf92e_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar
- Size 4.9MB
- Sample260731-vg7jksdf59
- SHA256 f6ff2df45ffd44d6ec6bade95ac2a0ee179c1d1076a1dca663e7b52765d92d50
- MD5 b895c4ff891996f97b6f3fe6333cf92e
- SHA1 a1c80a39acac5ba4a4d7f265a2386229b805d1f5
- SHA512 51f7f4836bac56926423dc0a3e6096259df9c6e057011773c01ce0be2a2c2bf01e781bb8b1d6be6358ab6ab00671cfaff20bd5c67b7c353a3cb1d2e04fc894b4
- SSDEEP 98304:EPA5sBcCqzC8DWq/Ri6WffmDKyMc0LBqHgWVuW/nimSqw:EPAyi/vn/R14fmmpLQHgWVj6qw
- TLSH T1DA36E038E9A41ED4F033F2344A51D511E2A57C7A63108BCF27D9A60A2B337F1657EB1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-31_b895c4ff891996f97b6f3fe6333cf92e_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_b895c4ff891996f97b6f3fe6333cf92e_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar.exe
Resource
win11ltsc2024-20260710-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_b895c4ff891996f97b6f3fe6333cf92e_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar
- Size 4.9MB
- SHA256 f6ff2df45ffd44d6ec6bade95ac2a0ee179c1d1076a1dca663e7b52765d92d50
- MD5 b895c4ff891996f97b6f3fe6333cf92e
- SHA1 a1c80a39acac5ba4a4d7f265a2386229b805d1f5
- SHA512 51f7f4836bac56926423dc0a3e6096259df9c6e057011773c01ce0be2a2c2bf01e781bb8b1d6be6358ab6ab00671cfaff20bd5c67b7c353a3cb1d2e04fc894b4
- SSDEEP 98304:EPA5sBcCqzC8DWq/Ri6WffmDKyMc0LBqHgWVuW/nimSqw:EPAyi/vn/R14fmmpLQHgWVj6qw
- TLSH T1DA36E038E9A41ED4F033F2344A51D511E2A57C7A63108BCF27D9A60A2B337F1657EB1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE