General
- Target 2026-09-30_38855e874390f224b290da692e7996cc_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar
- Size 5.1MB
- Sample261001-tknefaxt6p
- SHA256 c6ff6fca3aadd80017b9bc893fb00b7b0dc9a56745e52258a8e6adadf5c13275
- MD5 38855e874390f224b290da692e7996cc
- SHA1 e088c30890db9cdc813c28aa3ce9d3f6c5b913b0
- SHA512 21b284d4f50afce411deb9208e3bbcf5de6d1193ab06dd1fc085d62d1a95a66a1c7ae12d0aad0e12215981c8eea6d0322782af49fe314e0f7496a3770a425c65
- SSDEEP 98304:iPgisOcCFzQtDWq/xW6pLfhDKyMi0LbqHgWKu2/nim7q2Hv:iPgvZWqn/x55fhmrLGHgWKTDq2P
- TLSH T12F36E038E9A41ED4F033F2344A51D511E2A57C7A63108BCF27D9B60A2B337F1657EA1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-09-30_38855e874390f224b290da692e7996cc_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-30_38855e874390f224b290da692e7996cc_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-30_38855e874390f224b290da692e7996cc_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar
- Size 5.1MB
- SHA256 c6ff6fca3aadd80017b9bc893fb00b7b0dc9a56745e52258a8e6adadf5c13275
- MD5 38855e874390f224b290da692e7996cc
- SHA1 e088c30890db9cdc813c28aa3ce9d3f6c5b913b0
- SHA512 21b284d4f50afce411deb9208e3bbcf5de6d1193ab06dd1fc085d62d1a95a66a1c7ae12d0aad0e12215981c8eea6d0322782af49fe314e0f7496a3770a425c65
- SSDEEP 98304:iPgisOcCFzQtDWq/xW6pLfhDKyMi0LbqHgWKu2/nim7q2Hv:iPgvZWqn/x55fhmrLGHgWKTDq2P
- TLSH T12F36E038E9A41ED4F033F2344A51D511E2A57C7A63108BCF27D9B60A2B337F1657EA1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE