General
- Target 2026-04-15_95ca6a82ae8ab380a8122720f87ea8d8_agent-tesla_elex_hawkeye_maze_netwire_remcos_xloader
- Size 1.4MB
- Sample260415-e8mqgsey7p
- SHA256 3eda0b33b2279bc1426252b7090e4e85e284498c779b8f06b32b06b5ae2c9707
- MD5 95ca6a82ae8ab380a8122720f87ea8d8
- SHA1 147f6305d94cab57322636f8af67c3c25ec58b9d
- SHA512 c6e020e200f3f70c6a1b7029803c51aa068686d0fc4b2cb08fc9e82655fae01432b6e1083929e266c330a8ee64fd03b8db5c9bb0cf9a0f6e8cea82583bae6b1b
- SSDEEP 24576:du6J3xO0c+JY5UZ+XCHkGsoEAdx20W4njUprvVcC1f2o5RRfgT:vo0c++OCokGs7Adgrd1f26RY
- TLSH T10265BE52E38EC2F0DE165172BA7DF73A1E3B3C254530B9566FC5ED3AAD21021112DAA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-04-15_95ca6a82ae8ab380a8122720f87ea8d8_agent-tesla_elex_hawkeye_maze_netwire_remcos_xloader.exe
Resource
win10v2004-20260130-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-15_95ca6a82ae8ab380a8122720f87ea8d8_agent-tesla_elex_hawkeye_maze_netwire_remcos_xloader
- Size 1.4MB
- SHA256 3eda0b33b2279bc1426252b7090e4e85e284498c779b8f06b32b06b5ae2c9707
- MD5 95ca6a82ae8ab380a8122720f87ea8d8
- SHA1 147f6305d94cab57322636f8af67c3c25ec58b9d
- SHA512 c6e020e200f3f70c6a1b7029803c51aa068686d0fc4b2cb08fc9e82655fae01432b6e1083929e266c330a8ee64fd03b8db5c9bb0cf9a0f6e8cea82583bae6b1b
- SSDEEP 24576:du6J3xO0c+JY5UZ+XCHkGsoEAdx20W4njUprvVcC1f2o5RRfgT:vo0c++OCokGs7Adgrd1f26RY
- TLSH T10265BE52E38EC2F0DE165172BA7DF73A1E3B3C254530B9566FC5ED3AAD21021112DAA3
- MD5 SHA1 SHA512 SSDEEP TLSH
NetWire RAT payload
AutoIT Executable
AutoIT scripts compiled to PE executables.