General
- Target 2026-04-22_6b359d2731e90a2fe13e9cc836371b0c_agent-tesla_amadey_cobalt-strike_coinminer_darkgate_glassworm_hawkeye_hellokitty_hijackloader_icedid_luca-stealer_njrat_remcos_satacom_smoke-loader_stop_vidar
- Size 49.6MB
- Sample260422-e7mzvsg15n
- SHA256 945f8f8d53fc2ff5b279fabea6e9a92319510f3965c8e5190aeee7c44373da72
- MD5 6b359d2731e90a2fe13e9cc836371b0c
- SHA1 558e4e48afa15e796ef717776984b2ea86f3b3a8
- SHA512 ee82f4f3c95da56551bec68104c8852f4087b808c6184ba4183f7f9cf4b5850d8690cf0fdeec0c24846d83e070dedddb49ee1eecf3eb026a93ff4fd45d5330b0
- SSDEEP 786432:gEIvmTrEIvm5EIvmTtFEIvmTrEIvm5EIvmTt:wmTDmNmTtxmTDmNmTt
- TLSH T14AB7AD1177E881F5F5B75A359A3B8225EA76BC605E33C74F0280995E7F726808E39332
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
2026-04-22_6b359d2731e90a2fe13e9cc836371b0c_agent-tesla_amadey_cobalt-strike_coinminer_darkgate_glas.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-22_6b359d2731e90a2fe13e9cc836371b0c_agent-tesla_amadey_cobalt-strike_coinminer_darkgate_glas.exe
Resource
win11-20260130-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-22_6b359d2731e90a2fe13e9cc836371b0c_agent-tesla_amadey_cobalt-strike_coinminer_darkgate_glassworm_hawkeye_hellokitty_hijackloader_icedid_luca-stealer_njrat_remcos_satacom_smoke-loader_stop_vidar
- Size 49.6MB
- SHA256 945f8f8d53fc2ff5b279fabea6e9a92319510f3965c8e5190aeee7c44373da72
- MD5 6b359d2731e90a2fe13e9cc836371b0c
- SHA1 558e4e48afa15e796ef717776984b2ea86f3b3a8
- SHA512 ee82f4f3c95da56551bec68104c8852f4087b808c6184ba4183f7f9cf4b5850d8690cf0fdeec0c24846d83e070dedddb49ee1eecf3eb026a93ff4fd45d5330b0
- SSDEEP 786432:gEIvmTrEIvm5EIvmTtFEIvmTrEIvm5EIvmTt:wmTDmNmTtxmTDmNmTt
- TLSH T14AB7AD1177E881F5F5B75A359A3B8225EA76BC605E33C74F0280995E7F726808E39332
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.