General
- Target 2026-04-23_8425f9055c5e7991b164fd8eaca5ff49_agent-tesla_amadey_cobalt-strike_coinminer_darkgate_glassworm_hawkeye_hellokitty_hijackloader_icedid_luca-stealer_njrat_remcos_satacom_smoke-loader_stop_vidar
- Size 5.2MB
- Sample260423-db43tshs7w
- SHA256 b1c2d0998cd7d212540d96bba3bc34505d9619bcfc2e9752cf0178de32fffb96
- MD5 8425f9055c5e7991b164fd8eaca5ff49
- SHA1 933b4b7d0e22c71e395df65819aadfee05516b39
- SHA512 e725382a7407cb8e936696b37decd1945e0a523d2abfe78040be1426a4346a1cebe11daec9f6b292b4885cc0e3079281229d6daaa9fd5c8024ee1d3084f0d947
- SSDEEP 98304:LSERbwp79UKjKWQckVgtev5mnlNLu2cPK8x07pq7pD/j9TIc8NxpT:c3KWQc0gEYnvLhCKM/jCzT
- TLSH T1E6469E1177D08031F6B316329A7592695A79BC219E338E4F63C41EADBFB05D0AA39733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-04-23_8425f9055c5e7991b164fd8eaca5ff49_agent-tesla_amadey_cobalt-strike_coinminer_darkgate_glas.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-23_8425f9055c5e7991b164fd8eaca5ff49_agent-tesla_amadey_cobalt-strike_coinminer_darkgate_glas.exe
Resource
win11-20260130-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-23_8425f9055c5e7991b164fd8eaca5ff49_agent-tesla_amadey_cobalt-strike_coinminer_darkgate_glassworm_hawkeye_hellokitty_hijackloader_icedid_luca-stealer_njrat_remcos_satacom_smoke-loader_stop_vidar
- Size 5.2MB
- SHA256 b1c2d0998cd7d212540d96bba3bc34505d9619bcfc2e9752cf0178de32fffb96
- MD5 8425f9055c5e7991b164fd8eaca5ff49
- SHA1 933b4b7d0e22c71e395df65819aadfee05516b39
- SHA512 e725382a7407cb8e936696b37decd1945e0a523d2abfe78040be1426a4346a1cebe11daec9f6b292b4885cc0e3079281229d6daaa9fd5c8024ee1d3084f0d947
- SSDEEP 98304:LSERbwp79UKjKWQckVgtev5mnlNLu2cPK8x07pq7pD/j9TIc8NxpT:c3KWQc0gEYnvLhCKM/jCzT
- TLSH T1E6469E1177D08031F6B316329A7592695A79BC219E338E4F63C41EADBFB05D0AA39733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
AutoIT Executable
AutoIT scripts compiled to PE executables.