General
- Target 2026-04-16_6e11fd6010df6fa36ac3421041a12391_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hellokitty_hijackloader_icedid_luca-stealer_njrat_remcos_satacom_smoke-loader_stealc_vidar
- Size 25.0MB
- Sample260416-bb6kjsf17t
- SHA256 c72cf6dfe58fcb4803c058add750234578c52cbb0df2cc19c7ad23832e82c431
- MD5 6e11fd6010df6fa36ac3421041a12391
- SHA1 8d4c7f673485b18047ac3d0f0eaf6316489709c3
- SHA512 277f913081e5559c57d454cd0e250004b929772679ed09fed1a6efd507eda18889fa452338eb39a265cc0d65fd1d89da2e21a2123539bcad33604ad05f0c9843
- SSDEEP 393216:/oUqoUycZEIveahvQHrc8u3xXJ/f4uUWHg:SEIvXvQHrK5/f4uUr
- TLSH T1F547BF13B39680B6D066D2748A578216D7797C444332ABDF33D86A6D2F73BE04B3A361
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
5 signatures
Behavioral task
behavioral1
Sample
2026-04-16_6e11fd6010df6fa36ac3421041a12391_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win10v2004-20260130-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-16_6e11fd6010df6fa36ac3421041a12391_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win11-20260130-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-16_6e11fd6010df6fa36ac3421041a12391_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hellokitty_hijackloader_icedid_luca-stealer_njrat_remcos_satacom_smoke-loader_stealc_vidar
- Size 25.0MB
- SHA256 c72cf6dfe58fcb4803c058add750234578c52cbb0df2cc19c7ad23832e82c431
- MD5 6e11fd6010df6fa36ac3421041a12391
- SHA1 8d4c7f673485b18047ac3d0f0eaf6316489709c3
- SHA512 277f913081e5559c57d454cd0e250004b929772679ed09fed1a6efd507eda18889fa452338eb39a265cc0d65fd1d89da2e21a2123539bcad33604ad05f0c9843
- SSDEEP 393216:/oUqoUycZEIveahvQHrc8u3xXJ/f4uUWHg:SEIvXvQHrK5/f4uUr
- TLSH T1F547BF13B39680B6D066D2748A578216D7797C444332ABDF33D86A6D2F73BE04B3A361
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.