General
- Target 2026-08-25_e91aa78e72108363abef11156a688853_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar
- Size 5.7MB
- Sample260826-etr2nasbnh
- SHA256 1c2417310204544053916432d721e6f950e44d34e8d7450b2765467fbc3a0512
- MD5 e91aa78e72108363abef11156a688853
- SHA1 fe406eba140d95547f7c91d64ce54d1451204054
- SHA512 65aaef55720d3e1d0774c8c59e8bcd9044f76ef10633ad6ddd8b59724015fa366d3dbe417d82daa07e327e34a5833f41a0be672d93057fb2f711ebffae8d2923
- SSDEEP 98304:vP0QsBcXqzCtDWE/Ri6YLOmDKyM90LsqHgSKuu/nimSqwZiogLhhr+:vP05icMZ/R16OmmMLNHgSKL6qwmLDr+
- TLSH T1ED56F139E9A41ED4F033F2344661D411E2A57C7A63108BCF27D9A60A2B337F1657FA1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-25_e91aa78e72108363abef11156a688853_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-25_e91aa78e72108363abef11156a688853_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-25_e91aa78e72108363abef11156a688853_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar
- Size 5.7MB
- SHA256 1c2417310204544053916432d721e6f950e44d34e8d7450b2765467fbc3a0512
- MD5 e91aa78e72108363abef11156a688853
- SHA1 fe406eba140d95547f7c91d64ce54d1451204054
- SHA512 65aaef55720d3e1d0774c8c59e8bcd9044f76ef10633ad6ddd8b59724015fa366d3dbe417d82daa07e327e34a5833f41a0be672d93057fb2f711ebffae8d2923
- SSDEEP 98304:vP0QsBcXqzCtDWE/Ri6YLOmDKyM90LsqHgSKuu/nimSqwZiogLhhr+:vP05icMZ/R16OmmMLNHgSKL6qwmLDr+
- TLSH T1ED56F139E9A41ED4F033F2344661D411E2A57C7A63108BCF27D9A60A2B337F1657FA1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE