General
- Target 2026-04-22_168d31a1f93385142366df46669669c1_agent-tesla_amadey_cobalt-strike_darkgate_hawkeye_hijackloader_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_satacom_stealc_stop_vidar
- Size 24.6MB
- Sample260422-tm3bdaa16l
- SHA256 24403c4e5fef760da5a0fdafc288aa8d3441b10966cf6ebb030e73bb6a30a7cb
- MD5 168d31a1f93385142366df46669669c1
- SHA1 81f397453f41caaad385b11137cc8ecdba01a0a1
- SHA512 8fc374dbf601a26f71e2a0bc4dc4a32054d50dd130ce63abfaaef398650d988bb5005045356d8b8c685b0a8d09177f480460de19f10935fbc3163f8fd877d646
- SSDEEP 196608:2CX7mtvwOrCK0ujbv1yHCX7mtvwOrCK0ujbv1yHCX7mtvwOrCK0ujX:2ZvwAftyHZvwAftyHZvwAL
- TLSH T195478D0137E89971E0BB81354A369655DA367C188F31DACF12C02E6E7FB27D16E39722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-04-22_168d31a1f93385142366df46669669c1_agent-tesla_amadey_cobalt-strike_darkgate_hawkeye_hijack.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-22_168d31a1f93385142366df46669669c1_agent-tesla_amadey_cobalt-strike_darkgate_hawkeye_hijack.exe
Resource
win11-20260130-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-22_168d31a1f93385142366df46669669c1_agent-tesla_amadey_cobalt-strike_darkgate_hawkeye_hijackloader_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_satacom_stealc_stop_vidar
- Size 24.6MB
- SHA256 24403c4e5fef760da5a0fdafc288aa8d3441b10966cf6ebb030e73bb6a30a7cb
- MD5 168d31a1f93385142366df46669669c1
- SHA1 81f397453f41caaad385b11137cc8ecdba01a0a1
- SHA512 8fc374dbf601a26f71e2a0bc4dc4a32054d50dd130ce63abfaaef398650d988bb5005045356d8b8c685b0a8d09177f480460de19f10935fbc3163f8fd877d646
- SSDEEP 196608:2CX7mtvwOrCK0ujbv1yHCX7mtvwOrCK0ujbv1yHCX7mtvwOrCK0ujX:2ZvwAftyHZvwAftyHZvwAL
- TLSH T195478D0137E89971E0BB81354A369655DA367C188F31DACF12C02E6E7FB27D16E39722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
AutoIT Executable
AutoIT scripts compiled to PE executables.