General
- Target 2026-04-24_2118abebb8d12ff52324e0148bcf2301_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hellokitty_hijackloader_icedid_luca-stealer_njrat_remcos_satacom_smoke-loader_stop_vidar
- Size 50.8MB
- Sample260424-d5ttysdy8s
- SHA256 3e8769fe9e869235fc697bd0f6cd293ea21d501c3dd34339e161e3a18ead691b
- MD5 2118abebb8d12ff52324e0148bcf2301
- SHA1 4b1617b89293386a27041675d11236c53a3bd3f1
- SHA512 030aca395b057397e820a9a64e6247d6537f598846972b099666d5f3df1d137459c22108ef4e597ea607dfedb366cd7e970da9dff03531172270d14f9bfd5588
- SSDEEP 786432:gEIv2fEIv2fEIv2fEIv2fEIv2R7EIv2fEIv2fEIv2fEIv2fEIv2R0br0:w8888Yz8888Y0br0
- TLSH T15FC7BF1177D540F5F9B751358A6A9221DA767C220B3283CF23A8567E2F336D0AE39723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-04-24_2118abebb8d12ff52324e0148bcf2301_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-24_2118abebb8d12ff52324e0148bcf2301_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win11-20260130-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-24_2118abebb8d12ff52324e0148bcf2301_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hellokitty_hijackloader_icedid_luca-stealer_njrat_remcos_satacom_smoke-loader_stop_vidar
- Size 50.8MB
- SHA256 3e8769fe9e869235fc697bd0f6cd293ea21d501c3dd34339e161e3a18ead691b
- MD5 2118abebb8d12ff52324e0148bcf2301
- SHA1 4b1617b89293386a27041675d11236c53a3bd3f1
- SHA512 030aca395b057397e820a9a64e6247d6537f598846972b099666d5f3df1d137459c22108ef4e597ea607dfedb366cd7e970da9dff03531172270d14f9bfd5588
- SSDEEP 786432:gEIv2fEIv2fEIv2fEIv2fEIv2R7EIv2fEIv2fEIv2fEIv2fEIv2R0br0:w8888Yz8888Y0br0
- TLSH T15FC7BF1177D540F5F9B751358A6A9221DA767C220B3283CF23A8567E2F336D0AE39723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.