General
- Target 2026-08-12_bafc25d6180de24709143ba1c017785f_agent-tesla_elex_glassworm_icedid_loki-bot_njrat
- Size 3.9MB
- Sample260812-xkfw5sshmb
- SHA256 efa88a3f88a422af89500169e32fb43e4159e64d8628b61f1d1173370a3c4f4e
- MD5 bafc25d6180de24709143ba1c017785f
- SHA1 416dcb8d6bdcc567a211617566ba102434dcff5d
- SHA512 76eb0565d2aa3daeb42ddf8106a48f8f60d51be12e6ecf09a93962d3add87354d822667ec90f926c05616422ba26fba554545c51d39d4acc59784fd88be40c0e
- SSDEEP 98304:Ed2is/cCqzCtD5q/Ni6ULf4DKyMK0LAIHgWTuO:Ed2vE/MU/N1ef4mjLjHgWT/
- TLSH T12216E03D99A41FD0F133B2340A61D151E1A5BD7A63108BCF27D9A6092B337F161BFA1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-12_bafc25d6180de24709143ba1c017785f_agent-tesla_elex_glassworm_icedid_loki-bot_njrat.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-12_bafc25d6180de24709143ba1c017785f_agent-tesla_elex_glassworm_icedid_loki-bot_njrat.exe
Resource
win11ltsc2024-20260710-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_bafc25d6180de24709143ba1c017785f_agent-tesla_elex_glassworm_icedid_loki-bot_njrat
- Size 3.9MB
- SHA256 efa88a3f88a422af89500169e32fb43e4159e64d8628b61f1d1173370a3c4f4e
- MD5 bafc25d6180de24709143ba1c017785f
- SHA1 416dcb8d6bdcc567a211617566ba102434dcff5d
- SHA512 76eb0565d2aa3daeb42ddf8106a48f8f60d51be12e6ecf09a93962d3add87354d822667ec90f926c05616422ba26fba554545c51d39d4acc59784fd88be40c0e
- SSDEEP 98304:Ed2is/cCqzCtD5q/Ni6ULf4DKyMK0LAIHgWTuO:Ed2vE/MU/N1ef4mjLjHgWT/
- TLSH T12216E03D99A41FD0F133B2340A61D151E1A5BD7A63108BCF27D9A6092B337F161BFA1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE