General
- Target 2026-08-05_3887a1091b5878e6b7c54ab04bc4a9c7_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar
- Size 4.9MB
- Sample260805-gvffcswxev
- SHA256 639fed09fcc1e17d1cf357f596dcad8b1d272185a2ea0eb4a9d46188bb3539fb
- MD5 3887a1091b5878e6b7c54ab04bc4a9c7
- SHA1 6556756c12af21dc7a11d1bc99703af7ec197ca8
- SHA512 2056939dabf78ae61a0b034d47c896cd6dd6b5faf0839d0f0920b3c4396b355aa04714cf4b4274a7bb1d537a1092ebfc31c8b741bf1e8b6e6f6b53f72942e31d
- SSDEEP 98304:AP0ZsHcCqzC8DWq/Ri6ILfpDKyMC0L5WHg/KuuBniNSnw:AP0S8/vn/R1qfpmrLEHg/KLZnw
- TLSH T12B36E038E9A41ED4F033F2344A51D511E2A57C7A63108BCF27D9A60A2B337F1657EB1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-05_3887a1091b5878e6b7c54ab04bc4a9c7_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_3887a1091b5878e6b7c54ab04bc4a9c7_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_3887a1091b5878e6b7c54ab04bc4a9c7_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar
- Size 4.9MB
- SHA256 639fed09fcc1e17d1cf357f596dcad8b1d272185a2ea0eb4a9d46188bb3539fb
- MD5 3887a1091b5878e6b7c54ab04bc4a9c7
- SHA1 6556756c12af21dc7a11d1bc99703af7ec197ca8
- SHA512 2056939dabf78ae61a0b034d47c896cd6dd6b5faf0839d0f0920b3c4396b355aa04714cf4b4274a7bb1d537a1092ebfc31c8b741bf1e8b6e6f6b53f72942e31d
- SSDEEP 98304:AP0ZsHcCqzC8DWq/Ri6ILfpDKyMC0L5WHg/KuuBniNSnw:AP0S8/vn/R1qfpmrLEHg/KLZnw
- TLSH T12B36E038E9A41ED4F033F2344A51D511E2A57C7A63108BCF27D9A60A2B337F1657EB1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE