General
- Target 2026-04-23_ad06c4f6af8b129c317158fa5fc6bf07_agent-tesla_amadey_cobalt-strike_darkgate_fabookie_hawkeye_hellokitty_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_satacom_smoke-loader_stealc_vidar
- Size 3.8MB
- Sample260423-mwpcjsat8x
- SHA256 789b10a77ff51d987eda394c3109523922a9a69c2899b708e471a1d374c508a4
- MD5 ad06c4f6af8b129c317158fa5fc6bf07
- SHA1 9bb5e4fd53c3be70094032668efceeec263702f3
- SHA512 bf5a4135c65f4d785d437460c7885d99614b97e1319dc816887cd3a4aaf90109d66aa4a839bc1156dd8103d7d2bede466f4b51d4abb495b90da03102b03d96d0
- SSDEEP 98304:BllR35B2cPK8xabKjKWQckVgtev5mnlNLN://35YCKVoKWQc0gEYnvL
- TLSH T1B316BE1173E44075FAB386318961925DAA75B810C7338ECF22546EEDBFB25E09E39732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-04-23_ad06c4f6af8b129c317158fa5fc6bf07_agent-tesla_amadey_cobalt-strike_darkgate_fabookie_hawke.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-23_ad06c4f6af8b129c317158fa5fc6bf07_agent-tesla_amadey_cobalt-strike_darkgate_fabookie_hawke.exe
Resource
win11-20260130-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-23_ad06c4f6af8b129c317158fa5fc6bf07_agent-tesla_amadey_cobalt-strike_darkgate_fabookie_hawkeye_hellokitty_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_satacom_smoke-loader_stealc_vidar
- Size 3.8MB
- SHA256 789b10a77ff51d987eda394c3109523922a9a69c2899b708e471a1d374c508a4
- MD5 ad06c4f6af8b129c317158fa5fc6bf07
- SHA1 9bb5e4fd53c3be70094032668efceeec263702f3
- SHA512 bf5a4135c65f4d785d437460c7885d99614b97e1319dc816887cd3a4aaf90109d66aa4a839bc1156dd8103d7d2bede466f4b51d4abb495b90da03102b03d96d0
- SSDEEP 98304:BllR35B2cPK8xabKjKWQckVgtev5mnlNLN://35YCKVoKWQc0gEYnvL
- TLSH T1B316BE1173E44075FAB386318961925DAA75B810C7338ECF22546EEDBFB25E09E39732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
AutoIT Executable
AutoIT scripts compiled to PE executables.