General
- Target 2026-04-15_4bc39cebe86074f601d0fc3807e82720_agent-tesla_amadey_cobalt-strike_darkgate_fabookie_hawkeye_hijackloader_luca-stealer_njrat_remcos_rhadamanthys_satacom_smoke-loader_stealc_vidar
- Size 49.6MB
- Sample260415-3vae1aew8s
- SHA256 5ca4816e457c9446c3e2d4404a263cfba4c52068bb3dc49035ad93a5baffcefc
- MD5 4bc39cebe86074f601d0fc3807e82720
- SHA1 0854568d82436ef952672f70e5b31fabd2c367c8
- SHA512 894846618550f272996ff2f15a2d65e14cef68877a4ddc6c04c321b0be43018036d8281f1ba5b6272ad53e8b144f67903af6224c7d434e4a74c008384a371669
- SSDEEP 786432:85L5/5L5/5L5/5L5/5L5/5L5/5L5/5L5/5L5/5L5J2:s2
- TLSH T106B78D11B7E44176FAB39275CA659251AE767C200B32C6CF33547A6D2F336E0AA3D312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-04-15_4bc39cebe86074f601d0fc3807e82720_agent-tesla_amadey_cobalt-strike_darkgate_fabookie_hawke.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-15_4bc39cebe86074f601d0fc3807e82720_agent-tesla_amadey_cobalt-strike_darkgate_fabookie_hawke.exe
Resource
win11-20260130-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-15_4bc39cebe86074f601d0fc3807e82720_agent-tesla_amadey_cobalt-strike_darkgate_fabookie_hawkeye_hijackloader_luca-stealer_njrat_remcos_rhadamanthys_satacom_smoke-loader_stealc_vidar
- Size 49.6MB
- SHA256 5ca4816e457c9446c3e2d4404a263cfba4c52068bb3dc49035ad93a5baffcefc
- MD5 4bc39cebe86074f601d0fc3807e82720
- SHA1 0854568d82436ef952672f70e5b31fabd2c367c8
- SHA512 894846618550f272996ff2f15a2d65e14cef68877a4ddc6c04c321b0be43018036d8281f1ba5b6272ad53e8b144f67903af6224c7d434e4a74c008384a371669
- SSDEEP 786432:85L5/5L5/5L5/5L5/5L5/5L5/5L5/5L5/5L5/5L5J2:s2
- TLSH T106B78D11B7E44176FAB39275CA659251AE767C200B32C6CF33547A6D2F336E0AA3D312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.