General
- Target 2026-08-11_fd6022df87deccab9dc85683ad319f09_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar
- Size 4.9MB
- Sample260811-cfpchadq4t
- SHA256 0386eb60a20ae6acf6594ecd6e0ddff6765c2a49342689c7d879b77f3c3aff62
- MD5 fd6022df87deccab9dc85683ad319f09
- SHA1 c0857ba585b0feeb68536c22d1e4464be830e40a
- SHA512 5dfd1b42dc9d15e05e922e838e9da471826ca5909dfa8c96549c69da0ab36eff03d0e58f9a26d78fe8f33870606f263b5d1a3b2bf5ac2445679d401f605d3aba
- SSDEEP 98304:EL0FZzcCKz9XDWq/Zi65LHmJKyMc0LC9HgWKuu/VUmyww:EL0HAf9n/Z1JHmwNL8HgWKLKww
- TLSH T1B136E038E9A41ED4F033F2344A51D511E2A57C7A63108BCF27D9A60A2B337F1657EB1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-11_fd6022df87deccab9dc85683ad319f09_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-11_fd6022df87deccab9dc85683ad319f09_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar.exe
Resource
win11ltsc2024-20260710-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-11_fd6022df87deccab9dc85683ad319f09_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar
- Size 4.9MB
- SHA256 0386eb60a20ae6acf6594ecd6e0ddff6765c2a49342689c7d879b77f3c3aff62
- MD5 fd6022df87deccab9dc85683ad319f09
- SHA1 c0857ba585b0feeb68536c22d1e4464be830e40a
- SHA512 5dfd1b42dc9d15e05e922e838e9da471826ca5909dfa8c96549c69da0ab36eff03d0e58f9a26d78fe8f33870606f263b5d1a3b2bf5ac2445679d401f605d3aba
- SSDEEP 98304:EL0FZzcCKz9XDWq/Zi65LHmJKyMc0LC9HgWKuu/VUmyww:EL0HAf9n/Z1JHmwNL8HgWKLKww
- TLSH T1B136E038E9A41ED4F033F2344A51D511E2A57C7A63108BCF27D9A60A2B337F1657EB1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE