General
- Target 2026-08-09_a7de5241f845a4cadcd93853b47f980a_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar
- Size 6.5MB
- Sample260809-fr44wahp7t
- SHA256 6250ff686a8068318ae3f74a2bad2bed476291c0b11f93b4dfa8d61d91163028
- MD5 a7de5241f845a4cadcd93853b47f980a
- SHA1 3e7edfb79da6982fe9003fa6a1c92720f4125df6
- SHA512 067949dfb57477946485b4c66d242cf7a5cdca026ac04d7fe0319e40db966e155c87241cc970fba569cd80bd8df4d6c9f1e36503b7b1b13111980b6f92dfb39c
- SSDEEP 196608:E6Ivo/MEsR15fmmpLCHgKzLtqwSPTK+Z+0:E7vuMEsR1Ft4j/4Tk
- TLSH T1FE66F139E9A41ED4F033F6344661D411E2A57C7A63108BCF27D9B60A2B333F1657EA1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-09_a7de5241f845a4cadcd93853b47f980a_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_a7de5241f845a4cadcd93853b47f980a_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_a7de5241f845a4cadcd93853b47f980a_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar
- Size 6.5MB
- SHA256 6250ff686a8068318ae3f74a2bad2bed476291c0b11f93b4dfa8d61d91163028
- MD5 a7de5241f845a4cadcd93853b47f980a
- SHA1 3e7edfb79da6982fe9003fa6a1c92720f4125df6
- SHA512 067949dfb57477946485b4c66d242cf7a5cdca026ac04d7fe0319e40db966e155c87241cc970fba569cd80bd8df4d6c9f1e36503b7b1b13111980b6f92dfb39c
- SSDEEP 196608:E6Ivo/MEsR15fmmpLCHgKzLtqwSPTK+Z+0:E7vuMEsR1Ft4j/4Tk
- TLSH T1FE66F139E9A41ED4F033F6344661D411E2A57C7A63108BCF27D9B60A2B333F1657EA1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE