General
- Target 2026-08-20_0570e0c7c887992466b6e77e7cf0c5c4_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar
- Size 4.9MB
- Sample260820-mfs1ssvdkd
- SHA256 79888394c372a00e17de2ecf117fab8fd23ab1f0008f25f720e34884640c5d4c
- MD5 0570e0c7c887992466b6e77e7cf0c5c4
- SHA1 4e9e288050b680195cfe16f2a9d1d789a82002cf
- SHA512 f611946be6b429c5287a39f33cc7cad04af19cc7b79fc41e71a5c91e0c5a3783a171cd0426751ca53170b1a45b6ca1f69b82751af02003102d3758584a1a20f7
- SSDEEP 98304:EPlisBRCqzztDWb/iL6pLfmdK4MR0LYqHgWKuu/nimLrw:EPlvj/JW/iu5fmk2LxHgWKLTrw
- TLSH T1F136E038E9A41ED4F033F2344A51D511E2A57C7A63108BCF27D9A60A2B337F1657EB1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-20_0570e0c7c887992466b6e77e7cf0c5c4_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_0570e0c7c887992466b6e77e7cf0c5c4_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_0570e0c7c887992466b6e77e7cf0c5c4_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar
- Size 4.9MB
- SHA256 79888394c372a00e17de2ecf117fab8fd23ab1f0008f25f720e34884640c5d4c
- MD5 0570e0c7c887992466b6e77e7cf0c5c4
- SHA1 4e9e288050b680195cfe16f2a9d1d789a82002cf
- SHA512 f611946be6b429c5287a39f33cc7cad04af19cc7b79fc41e71a5c91e0c5a3783a171cd0426751ca53170b1a45b6ca1f69b82751af02003102d3758584a1a20f7
- SSDEEP 98304:EPlisBRCqzztDWb/iL6pLfmdK4MR0LYqHgWKuu/nimLrw:EPlvj/JW/iu5fmk2LxHgWKLTrw
- TLSH T1F136E038E9A41ED4F033F2344A51D511E2A57C7A63108BCF27D9A60A2B337F1657EB1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE