General
- Target 2026-04-20_23bb78720e0b445c26306cec4b65a8ac_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_satacom_smoke-loader_stop
- Size 56.3MB
- Sample260420-e4av5agz6n
- SHA256 9cc6dc920884ee543a028631cff67f97e4c95ab589838d7a571160741ec5135e
- MD5 23bb78720e0b445c26306cec4b65a8ac
- SHA1 4c1faac0b99377bb75ada50ccf0f1acf8ef6d316
- SHA512 b9d8911e3f5929cd61c8c8fa487bb8d8c9af19d87080241b03d0ae0ba79ba152842f102ecfa04c34a60818e7009256e26b7d48675eeb343e668fe0ddfae810e6
- SSDEEP 393216:poUmTloUmTDoUmTloUmTDoUmTloUmTDoUmTloUmTDoUmTloUmT:
- TLSH T131D79D0276D18531E5B7153149699228567ABC618F338ECF738C2EAEBFB05C19A35B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-04-20_23bb78720e0b445c26306cec4b65a8ac_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-20_23bb78720e0b445c26306cec4b65a8ac_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win11-20260130-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-20_23bb78720e0b445c26306cec4b65a8ac_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_satacom_smoke-loader_stop
- Size 56.3MB
- SHA256 9cc6dc920884ee543a028631cff67f97e4c95ab589838d7a571160741ec5135e
- MD5 23bb78720e0b445c26306cec4b65a8ac
- SHA1 4c1faac0b99377bb75ada50ccf0f1acf8ef6d316
- SHA512 b9d8911e3f5929cd61c8c8fa487bb8d8c9af19d87080241b03d0ae0ba79ba152842f102ecfa04c34a60818e7009256e26b7d48675eeb343e668fe0ddfae810e6
- SSDEEP 393216:poUmTloUmTDoUmTloUmTDoUmTloUmTDoUmTloUmTDoUmTloUmT:
- TLSH T131D79D0276D18531E5B7153149699228567ABC618F338ECF738C2EAEBFB05C19A35B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.