General
- Target 2026-04-15_0ce80a84458af0269df3d06c8a30bfa5_agent-tesla_amadey_cobalt-strike_darkgate_fabookie_hawkeye_hijackloader_luca-stealer_njrat_remcos_rhadamanthys_satacom_smoke-loader_stealc_vidar
- Size 61.9MB
- Sample260415-2txcpsdy4s
- SHA256 8e6bf58ffe14c534702bb8111e98edbb3e50a2e03c58f94880402dcf0b464a4d
- MD5 0ce80a84458af0269df3d06c8a30bfa5
- SHA1 19ebbafb4d0c0e9cce815de3a8e56289808f52cb
- SHA512 75ff4b8a1d83d9879757c9668ce4e1226e58bb6f042782bc83858fc90120c2e5329a6b9dff3f9d07f8ca51e886de26c0aeb90acc443056a736c6e46e60459e8a
- SSDEEP 786432:85/5L5/5L5/5L5/5L5/5L5/5L5/5L5/5L5/5L5/5L5/5L5/5L5J2:u2
- TLSH T100E78D11B7E48176FAB39275CA659251AE767C200732C6CF33547A6D2F336E0AA3D312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-04-15_0ce80a84458af0269df3d06c8a30bfa5_agent-tesla_amadey_cobalt-strike_darkgate_fabookie_hawke.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-15_0ce80a84458af0269df3d06c8a30bfa5_agent-tesla_amadey_cobalt-strike_darkgate_fabookie_hawke.exe
Resource
win11-20260130-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-15_0ce80a84458af0269df3d06c8a30bfa5_agent-tesla_amadey_cobalt-strike_darkgate_fabookie_hawkeye_hijackloader_luca-stealer_njrat_remcos_rhadamanthys_satacom_smoke-loader_stealc_vidar
- Size 61.9MB
- SHA256 8e6bf58ffe14c534702bb8111e98edbb3e50a2e03c58f94880402dcf0b464a4d
- MD5 0ce80a84458af0269df3d06c8a30bfa5
- SHA1 19ebbafb4d0c0e9cce815de3a8e56289808f52cb
- SHA512 75ff4b8a1d83d9879757c9668ce4e1226e58bb6f042782bc83858fc90120c2e5329a6b9dff3f9d07f8ca51e886de26c0aeb90acc443056a736c6e46e60459e8a
- SSDEEP 786432:85/5L5/5L5/5L5/5L5/5L5/5L5/5L5/5L5/5L5/5L5/5L5/5L5J2:u2
- TLSH T100E78D11B7E48176FAB39275CA659251AE767C200732C6CF33547A6D2F336E0AA3D312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.