General
- Target 2026-04-23_832cff72cbceffe8eb894dcc2a8d3bfb_agent-tesla_amadey_cobalt-strike_darkgate_fabookie_glassworm_hawkeye_icedid_luca-stealer_njrat_remcos_rhadamanthys_satacom_smoke-loader_vidar_wannacry
- Size 9.2MB
- Sample260423-fft5jabs2w
- SHA256 1599fcafb78f160409db116973739ad60032c28f0f5639d50d3c324dd9989b63
- MD5 832cff72cbceffe8eb894dcc2a8d3bfb
- SHA1 9e1b2c37c8d0501b4df1ccac050ffd8b454750f9
- SHA512 a5a990075955f73b6827c9bc3688ead218d836aac98418841c85569e39d4e95c92bfad6994a471389e63eeeae0fc482689d8fabe14eb69a3562c420f5091b37e
- SSDEEP 98304:BllR35B2cPK8xl1MbQ9yDAD7KjjqkusjmqMhA7pl://35YCK+1tIDewjqkjiqM
- TLSH T1E1A67C29ABF481E5F9BBD938A9778631FA7279100933534F4AE0C61E6F335914D28732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-04-23_832cff72cbceffe8eb894dcc2a8d3bfb_agent-tesla_amadey_cobalt-strike_darkgate_fabookie_glass.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-23_832cff72cbceffe8eb894dcc2a8d3bfb_agent-tesla_amadey_cobalt-strike_darkgate_fabookie_glass.exe
Resource
win11-20260130-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-23_832cff72cbceffe8eb894dcc2a8d3bfb_agent-tesla_amadey_cobalt-strike_darkgate_fabookie_glassworm_hawkeye_icedid_luca-stealer_njrat_remcos_rhadamanthys_satacom_smoke-loader_vidar_wannacry
- Size 9.2MB
- SHA256 1599fcafb78f160409db116973739ad60032c28f0f5639d50d3c324dd9989b63
- MD5 832cff72cbceffe8eb894dcc2a8d3bfb
- SHA1 9e1b2c37c8d0501b4df1ccac050ffd8b454750f9
- SHA512 a5a990075955f73b6827c9bc3688ead218d836aac98418841c85569e39d4e95c92bfad6994a471389e63eeeae0fc482689d8fabe14eb69a3562c420f5091b37e
- SSDEEP 98304:BllR35B2cPK8xl1MbQ9yDAD7KjjqkusjmqMhA7pl://35YCK+1tIDewjqkjiqM
- TLSH T1E1A67C29ABF481E5F9BBD938A9778631FA7279100933534F4AE0C61E6F335914D28732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
AutoIT Executable
AutoIT scripts compiled to PE executables.