General
- Target 2026-08-04_70808d90df0405b09870bc86581258a9_agent-tesla_elex_glassworm_icedid_loki-bot_njrat
- Size 12.1MB
- Sample260804-yhh46ayepb
- SHA256 077373bf7969466ff2d63fe3d7a7401baf0c476274d8acbdfeed0b2948a481a1
- MD5 70808d90df0405b09870bc86581258a9
- SHA1 8cd926ec9d9700bdc3a24ab321f94e78b9679e03
- SHA512 8d386c4c03bfa9f2791a96c1149bd8f5ffd84ab0c9cf544b756f8c4139086763e82b505b03224db60d0a5fdcbe818a5b59399edf15d5dfeebc29dd22ede17443
- SSDEEP 196608:8+bUGJiOf15KUxqnYKfcLibnLD9dppqMP0ri/Mn/R15fmmpLDHgWvL:/IqbfbKUxqnvdbntd78r4Mn/R1FtnXz
- TLSH T1A1D69DF68C305652FE3A4C35DEA1AAA48D35B8291F90DBCB2915718F63736F7603D188
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-04_70808d90df0405b09870bc86581258a9_agent-tesla_elex_glassworm_icedid_loki-bot_njrat.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_70808d90df0405b09870bc86581258a9_agent-tesla_elex_glassworm_icedid_loki-bot_njrat.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_70808d90df0405b09870bc86581258a9_agent-tesla_elex_glassworm_icedid_loki-bot_njrat
- Size 12.1MB
- SHA256 077373bf7969466ff2d63fe3d7a7401baf0c476274d8acbdfeed0b2948a481a1
- MD5 70808d90df0405b09870bc86581258a9
- SHA1 8cd926ec9d9700bdc3a24ab321f94e78b9679e03
- SHA512 8d386c4c03bfa9f2791a96c1149bd8f5ffd84ab0c9cf544b756f8c4139086763e82b505b03224db60d0a5fdcbe818a5b59399edf15d5dfeebc29dd22ede17443
- SSDEEP 196608:8+bUGJiOf15KUxqnYKfcLibnLD9dppqMP0ri/Mn/R15fmmpLDHgWvL:/IqbfbKUxqnvdbntd78r4Mn/R1FtnXz
- TLSH T1A1D69DF68C305652FE3A4C35DEA1AAA48D35B8291F90DBCB2915718F63736F7603D188
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE