General
- Target 2026-08-08_ac198113454b344af12da676654df22a_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar
- Size 6.5MB
- Sample260808-rmwsgssvgz
- SHA256 5b23ff10f699f4126e826dbd1857159cc280f6058ecae5303e6cd181fbd3a71c
- MD5 ac198113454b344af12da676654df22a
- SHA1 fd137c2de622fdffaea4224643a5ff0f688da7dd
- SHA512 9c71613ca7fa5527a4936a9691c334c0bd198ab5d8c2b3ac4a8c94265e13797a3825214681d8293a5f20f68c992aa7f6f8087b59bd92e2bd5b4b7b7be5b44798
- SSDEEP 196608:EP0zi/M5st15fmDpLFHUKzgZqwSLTK+ZrP:E8z4M5st1Fkx38oTh
- TLSH T1CF66F139E9A41ED4F033F6344661D411E2A57C7A63108BCF27D9B60A2B333F1657EA1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-08_ac198113454b344af12da676654df22a_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_ac198113454b344af12da676654df22a_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_ac198113454b344af12da676654df22a_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar
- Size 6.5MB
- SHA256 5b23ff10f699f4126e826dbd1857159cc280f6058ecae5303e6cd181fbd3a71c
- MD5 ac198113454b344af12da676654df22a
- SHA1 fd137c2de622fdffaea4224643a5ff0f688da7dd
- SHA512 9c71613ca7fa5527a4936a9691c334c0bd198ab5d8c2b3ac4a8c94265e13797a3825214681d8293a5f20f68c992aa7f6f8087b59bd92e2bd5b4b7b7be5b44798
- SSDEEP 196608:EP0zi/M5st15fmDpLFHUKzgZqwSLTK+ZrP:E8z4M5st1Fkx38oTh
- TLSH T1CF66F139E9A41ED4F033F6344661D411E2A57C7A63108BCF27D9B60A2B333F1657EA1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE