General
- Target 2026-04-24_8ed4a9757fdaa5a314bf19da4f930e86_agent-tesla_amadey_cobalt-strike_coinminer_cryptbot_darkgate_glassworm_hawkeye_icedid_njrat_poet-rat_remcos_satacom_vidar
- Size 9.5MB
- Sample260424-db1emsdt91
- SHA256 335a89a0ea299f316978d813e8b370ac42332500103864165df0e6621416e130
- MD5 8ed4a9757fdaa5a314bf19da4f930e86
- SHA1 0e9a7017c6c4a24f7938a3bacb0c399446dada54
- SHA512 e52594d22eccad83f2d32ef9c33f73c34d7ab1e72352b2adfc6aba3f10ab337ca384ddb3a875450b6215f549cb3e8b8b436277ff5ce69e654a5bf9b9097a2201
- SSDEEP 98304:X2cPK8xk2cPK8xls/fh6ImzzJoDfuBcMv+A73XA:GCK2CKGsHh6ImzD+F
- TLSH T1AAA68D01EA9B90FAEA0745308967961FA731BC068731D7CFD7502EA6AD736D11F3A312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-04-24_8ed4a9757fdaa5a314bf19da4f930e86_agent-tesla_amadey_cobalt-strike_coinminer_cryptbot_dark.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-24_8ed4a9757fdaa5a314bf19da4f930e86_agent-tesla_amadey_cobalt-strike_coinminer_cryptbot_dark.exe
Resource
win11-20260130-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-24_8ed4a9757fdaa5a314bf19da4f930e86_agent-tesla_amadey_cobalt-strike_coinminer_cryptbot_darkgate_glassworm_hawkeye_icedid_njrat_poet-rat_remcos_satacom_vidar
- Size 9.5MB
- SHA256 335a89a0ea299f316978d813e8b370ac42332500103864165df0e6621416e130
- MD5 8ed4a9757fdaa5a314bf19da4f930e86
- SHA1 0e9a7017c6c4a24f7938a3bacb0c399446dada54
- SHA512 e52594d22eccad83f2d32ef9c33f73c34d7ab1e72352b2adfc6aba3f10ab337ca384ddb3a875450b6215f549cb3e8b8b436277ff5ce69e654a5bf9b9097a2201
- SSDEEP 98304:X2cPK8xk2cPK8xls/fh6ImzzJoDfuBcMv+A73XA:GCK2CKGsHh6ImzD+F
- TLSH T1AAA68D01EA9B90FAEA0745308967961FA731BC068731D7CFD7502EA6AD736D11F3A312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
AutoIT Executable
AutoIT scripts compiled to PE executables.