General
- Target 2026-08-04_fad61e4f3a00c01883fcafcd967a66ae_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar
- Size 4.9MB
- Sample260804-qnpvwsfn8v
- SHA256 4489a5d38c72547289929d08809a6d236c8fb8c645465c45ee79cb89f0dbaccc
- MD5 fad61e4f3a00c01883fcafcd967a66ae
- SHA1 b0c9a725a896640731971a2cb77b9132835bebe8
- SHA512 18152b515535eb3f0a80b198bbe34e88c1a45322c93b2457513fae0bdd27ee24474e2860d60127e942635f870d6151fb563e6e1c1e96b3648ea903a24617cfbf
- SSDEEP 98304:EPpdsQcCqzCtKWc/pi6pLfiZKyMF0L2VHgCKuu/nFmH5w:EPpOP/Fh/p15figQLAHgCKLK5w
- TLSH T18D36E038E9A41ED4F033F2344A51D511E2A57C7A63108BCF27D9A60A2B337F1657EB1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-04_fad61e4f3a00c01883fcafcd967a66ae_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_fad61e4f3a00c01883fcafcd967a66ae_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_fad61e4f3a00c01883fcafcd967a66ae_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar
- Size 4.9MB
- SHA256 4489a5d38c72547289929d08809a6d236c8fb8c645465c45ee79cb89f0dbaccc
- MD5 fad61e4f3a00c01883fcafcd967a66ae
- SHA1 b0c9a725a896640731971a2cb77b9132835bebe8
- SHA512 18152b515535eb3f0a80b198bbe34e88c1a45322c93b2457513fae0bdd27ee24474e2860d60127e942635f870d6151fb563e6e1c1e96b3648ea903a24617cfbf
- SSDEEP 98304:EPpdsQcCqzCtKWc/pi6pLfiZKyMF0L2VHgCKuu/nFmH5w:EPpOP/Fh/p15figQLAHgCKLK5w
- TLSH T18D36E038E9A41ED4F033F2344A51D511E2A57C7A63108BCF27D9A60A2B337F1657EB1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE