General
- Target 2026-08-01_d28ab88cd1e6627cb532f26d76efbb41_agent-tesla_elex_glassworm_icedid_loki-bot_njrat
- Size 4.2MB
- Sample260801-py9glsbk2y
- SHA256 b79fa2a5e14c9de483578a684f08e90aedc4bacf6c6959b0314049529ea9149b
- MD5 d28ab88cd1e6627cb532f26d76efbb41
- SHA1 2a0958d7d1a751f8517c71d64fa288c6fc5680a8
- SHA512 95c54e72820e1499a4765db18d90a26c644356e0f1cbcf3a402e31b0f40bfe30a54f95a086c26c78e7b562c1e104e2b978a8fe9ae81ca9572946f938abf77df1
- SSDEEP 98304:EP9HsBceqzQxDWq/Hi6pLfmDKyMa0LydHyWuuc/n+:EP9Mijmn/H15fmmjLMHyWuBG
- TLSH T17626E039A9A41FD0F133B2340661D151E1A5BD7A63108BCF27D9B60A27337F161BFA1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-01_d28ab88cd1e6627cb532f26d76efbb41_agent-tesla_elex_glassworm_icedid_loki-bot_njrat.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_d28ab88cd1e6627cb532f26d76efbb41_agent-tesla_elex_glassworm_icedid_loki-bot_njrat.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_d28ab88cd1e6627cb532f26d76efbb41_agent-tesla_elex_glassworm_icedid_loki-bot_njrat
- Size 4.2MB
- SHA256 b79fa2a5e14c9de483578a684f08e90aedc4bacf6c6959b0314049529ea9149b
- MD5 d28ab88cd1e6627cb532f26d76efbb41
- SHA1 2a0958d7d1a751f8517c71d64fa288c6fc5680a8
- SHA512 95c54e72820e1499a4765db18d90a26c644356e0f1cbcf3a402e31b0f40bfe30a54f95a086c26c78e7b562c1e104e2b978a8fe9ae81ca9572946f938abf77df1
- SSDEEP 98304:EP9HsBceqzQxDWq/Hi6pLfmDKyMa0LydHyWuuc/n+:EP9Mijmn/H15fmmjLMHyWuBG
- TLSH T17626E039A9A41FD0F133B2340661D151E1A5BD7A63108BCF27D9B60A27337F161BFA1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE