General
- Target 2026-08-06_1db7f82b5ec046451d72e8f45f7cf2b5_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar
- Size 4.9MB
- Sample260807-beldsavcra
- SHA256 361fd0e7a11364e91960211760abf12563d1c608bd1d53e196703becab32a094
- MD5 1db7f82b5ec046451d72e8f45f7cf2b5
- SHA1 47d75ee14e41f31a4a3401361013396c6e79b3ad
- SHA512 db83b5aadc6fd463b3752f3a39bfaa2dcef3571c469986f1bd3dd71420279e9273d5ce1b7350345ca2210663704163026272321165df534fd3ef33634ebe3c63
- SSDEEP 98304:EjpisicCqzCtDWq/9i6eLfmDKyMs0VaaHgWmuu/njmdqw:EjpvV/Mn/91cfmmFV/HgWmLSqw
- TLSH T12E36E038E9A41ED4F033F2344A51D511E2A57C7A63108BCF27D9A60A2B337F1657EB1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-06_1db7f82b5ec046451d72e8f45f7cf2b5_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_1db7f82b5ec046451d72e8f45f7cf2b5_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_1db7f82b5ec046451d72e8f45f7cf2b5_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar
- Size 4.9MB
- SHA256 361fd0e7a11364e91960211760abf12563d1c608bd1d53e196703becab32a094
- MD5 1db7f82b5ec046451d72e8f45f7cf2b5
- SHA1 47d75ee14e41f31a4a3401361013396c6e79b3ad
- SHA512 db83b5aadc6fd463b3752f3a39bfaa2dcef3571c469986f1bd3dd71420279e9273d5ce1b7350345ca2210663704163026272321165df534fd3ef33634ebe3c63
- SSDEEP 98304:EjpisicCqzCtDWq/9i6eLfmDKyMs0VaaHgWmuu/njmdqw:EjpvV/Mn/91cfmmFV/HgWmLSqw
- TLSH T12E36E038E9A41ED4F033F2344A51D511E2A57C7A63108BCF27D9A60A2B337F1657EB1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Drops file in System32 directory