General
- Target 2026-04-24_4bd44acc0de7664cdf71faf4e4a8e591_agent-tesla_amadey_cobalt-strike_darkgate_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_satacom_vidar
- Size 12.6MB
- Sample260424-bb1pasay2r
- SHA256 f64d0639733e730feb899963cd83d474dfb9583c9dbf310f71ab5049ab502f2a
- MD5 4bd44acc0de7664cdf71faf4e4a8e591
- SHA1 e848de010193f91ab7c9f538127400385428d3e5
- SHA512 154dc5ce85fd3c9a6a3734b5bdd237d845f53dc47acf6da03bd2a9cd1e3bb865572cfb1dd459dc1ee66695f31be6c71ea2a62e5642a0ddfd3d2d6f3634790440
- SSDEEP 393216:rLO4q78UhasjLO4q78UhasUCDLO4q78UhasjLO4q78UhasUCvD:ChasqhasUCKhasqhasUCr
- TLSH T119D69E386EA441B2E9728631C5A1B5CDEA357C11AB024FCF12D01B8E5E3B7D26D35E36
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-04-24_4bd44acc0de7664cdf71faf4e4a8e591_agent-tesla_amadey_cobalt-strike_darkgate_hawkeye_hijack.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-24_4bd44acc0de7664cdf71faf4e4a8e591_agent-tesla_amadey_cobalt-strike_darkgate_hawkeye_hijack.exe
Resource
win11-20260130-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-24_4bd44acc0de7664cdf71faf4e4a8e591_agent-tesla_amadey_cobalt-strike_darkgate_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_satacom_vidar
- Size 12.6MB
- SHA256 f64d0639733e730feb899963cd83d474dfb9583c9dbf310f71ab5049ab502f2a
- MD5 4bd44acc0de7664cdf71faf4e4a8e591
- SHA1 e848de010193f91ab7c9f538127400385428d3e5
- SHA512 154dc5ce85fd3c9a6a3734b5bdd237d845f53dc47acf6da03bd2a9cd1e3bb865572cfb1dd459dc1ee66695f31be6c71ea2a62e5642a0ddfd3d2d6f3634790440
- SSDEEP 393216:rLO4q78UhasjLO4q78UhasUCDLO4q78UhasjLO4q78UhasUCvD:ChasqhasUCKhasqhasUCr
- TLSH T119D69E386EA441B2E9728631C5A1B5CDEA357C11AB024FCF12D01B8E5E3B7D26D35E36
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
AutoIT Executable
AutoIT scripts compiled to PE executables.