General
- Target 2026-08-02_02ca410bd21364eeaf6f0f0fa1ee75ec_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar
- Size 13.3MB
- Sample260802-ea4lcasxbv
- SHA256 0e67953d6af184cd05fe71a635efd092bc9e2b13aca29e9ba82ec95afb9d0d2a
- MD5 02ca410bd21364eeaf6f0f0fa1ee75ec
- SHA1 ed2925f3e2f03a01abd95ab8644369036f72ed00
- SHA512 a3f8568a983bced29f8868161063bc8435faeabe975685f3412d184b35f7084f856e04713ead2c7f8cf3b70973407f5bf18642e9f93110b946b9632de3a5d5fc
- SSDEEP 393216:/ZS5JEKUxqnvQbn7d38v/Mn/i1FtnX/OTM:hqtUxgvOp3GM/+bnXG4
- TLSH T1C3E6AEF68C705652FE3A4C35DEA1AAA48D3578291F90CBCB2915718F63736F7603D288
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-02_02ca410bd21364eeaf6f0f0fa1ee75ec_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_02ca410bd21364eeaf6f0f0fa1ee75ec_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_02ca410bd21364eeaf6f0f0fa1ee75ec_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar
- Size 13.3MB
- SHA256 0e67953d6af184cd05fe71a635efd092bc9e2b13aca29e9ba82ec95afb9d0d2a
- MD5 02ca410bd21364eeaf6f0f0fa1ee75ec
- SHA1 ed2925f3e2f03a01abd95ab8644369036f72ed00
- SHA512 a3f8568a983bced29f8868161063bc8435faeabe975685f3412d184b35f7084f856e04713ead2c7f8cf3b70973407f5bf18642e9f93110b946b9632de3a5d5fc
- SSDEEP 393216:/ZS5JEKUxqnvQbn7d38v/Mn/i1FtnX/OTM:hqtUxgvOp3GM/+bnXG4
- TLSH T1C3E6AEF68C705652FE3A4C35DEA1AAA48D3578291F90CBCB2915718F63736F7603D288
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE