General
- Target 2026-08-08_eb128886ed086b961493ba54171829a3_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar
- Size 4.9MB
- Sample260808-rd357sgl3t
- SHA256 70d8c8708404792dbd1295e2feb2812827b92b3eec0d258b39ed1cc5ff47274c
- MD5 eb128886ed086b961493ba54171829a3
- SHA1 4731503d99159cf3140ef27df81124e782545a45
- SHA512 66aca9c91609995c08fb4a79bd392fb4551cb152dd30633ca87a55965145165d7175e0c687133ccd01dfe6a63c35ef13eefb12a12269e6da5f2315fdb4ae31d3
- SSDEEP 98304:A+dDsBcCqzCxDWq/Ri6pLfmDKyM+0LZqHgtHuuBS++Sbw:A+dwi/gn/R15fmmPLoHgtHLnbw
- TLSH T15236E038E9A41ED4F033F2344A51D511E2A57C7A63108BCF27D9A60A2B337F1657EB1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-08_eb128886ed086b961493ba54171829a3_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_eb128886ed086b961493ba54171829a3_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_eb128886ed086b961493ba54171829a3_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar
- Size 4.9MB
- SHA256 70d8c8708404792dbd1295e2feb2812827b92b3eec0d258b39ed1cc5ff47274c
- MD5 eb128886ed086b961493ba54171829a3
- SHA1 4731503d99159cf3140ef27df81124e782545a45
- SHA512 66aca9c91609995c08fb4a79bd392fb4551cb152dd30633ca87a55965145165d7175e0c687133ccd01dfe6a63c35ef13eefb12a12269e6da5f2315fdb4ae31d3
- SSDEEP 98304:A+dDsBcCqzCxDWq/Ri6pLfmDKyM+0LZqHgtHuuBS++Sbw:A+dwi/gn/R15fmmPLoHgtHLnbw
- TLSH T15236E038E9A41ED4F033F2344A51D511E2A57C7A63108BCF27D9A60A2B337F1657EB1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE