General
- Target 2026-04-20_ff6a4a2fa33a130ba83d0fbdf64b73b1_agent-tesla_amadey_cobalt-strike_darkgate_fabookie_glassworm_hawkeye_icedid_njrat_remcos_rhadamanthys_satacom_smoke-loader_vidar
- Size 17.6MB
- Sample260420-stctmaes2k
- SHA256 81445b6b616d1e50afc0a25cba27bd3ab1c5719283182f44b440770b57bfc836
- MD5 ff6a4a2fa33a130ba83d0fbdf64b73b1
- SHA1 44f22357baa931ddbaaaa6fec5103ccf8de11849
- SHA512 e610c3b5b128360a3401f64745a95d954b9960073b708af5ee39133f83ebc6dbf975f84e4a43bbd933382cd449624cc5106173869daf0ba04a97955c249db939
- SSDEEP 196608://35YCKT/C/35YCK+1tIDewjqkjiqM71tIDewjqkjiqMTq://357m/C/357D8Kweky78KwekyTq
- TLSH T1C2076C29ABF481E5F9ABD83DA9778631FA7279100A33534F89E0C61E6F335914D29331
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-04-20_ff6a4a2fa33a130ba83d0fbdf64b73b1_agent-tesla_amadey_cobalt-strike_darkgate_fabookie_glass.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-20_ff6a4a2fa33a130ba83d0fbdf64b73b1_agent-tesla_amadey_cobalt-strike_darkgate_fabookie_glass.exe
Resource
win11-20260130-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-20_ff6a4a2fa33a130ba83d0fbdf64b73b1_agent-tesla_amadey_cobalt-strike_darkgate_fabookie_glassworm_hawkeye_icedid_njrat_remcos_rhadamanthys_satacom_smoke-loader_vidar
- Size 17.6MB
- SHA256 81445b6b616d1e50afc0a25cba27bd3ab1c5719283182f44b440770b57bfc836
- MD5 ff6a4a2fa33a130ba83d0fbdf64b73b1
- SHA1 44f22357baa931ddbaaaa6fec5103ccf8de11849
- SHA512 e610c3b5b128360a3401f64745a95d954b9960073b708af5ee39133f83ebc6dbf975f84e4a43bbd933382cd449624cc5106173869daf0ba04a97955c249db939
- SSDEEP 196608://35YCKT/C/35YCK+1tIDewjqkjiqM71tIDewjqkjiqMTq://357m/C/357D8Kweky78KwekyTq
- TLSH T1C2076C29ABF481E5F9ABD83DA9778631FA7279100A33534F89E0C61E6F335914D29331
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
AutoIT Executable
AutoIT scripts compiled to PE executables.