General
- Target 2026-04-25_60096ff607138c1af1a7b4d83b9b0a28_agent-tesla_amadey_cobalt-strike_darkgate_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_satacom_stealc_vidar
- Size 53.2MB
- Sample260425-c8243ac19w
- SHA256 b9534a982d2d5b9741118e95092c8980fba9064d069dedf71c25b79cc43deb43
- MD5 60096ff607138c1af1a7b4d83b9b0a28
- SHA1 9649f3b6106c6e99b6085cb09fc34bdbd0d0a191
- SHA512 67324c03a6c282c060727c300adbd128c94fb35c4280e942df907b12c24ac433d9b3bc8edfd1b01d5790b348cd55c697ca7c85d256e7d4d5831798ac960fd7f7
- SSDEEP 196608:GCK0CK1rCK0CK1CCK0CK1rCK0CK1UCK0CK1rCK0CK1CCK0CK1rCK0CK1tjn:FGRGmGRG4GRGmGRGeD
- TLSH T158C7AE02A7A590BFE66B8970C9239905DF72BC824771A78F13902DEA1D727D05F3E712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-04-25_60096ff607138c1af1a7b4d83b9b0a28_agent-tesla_amadey_cobalt-strike_darkgate_hawkeye_hijack.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-25_60096ff607138c1af1a7b4d83b9b0a28_agent-tesla_amadey_cobalt-strike_darkgate_hawkeye_hijack.exe
Resource
win11-20260130-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-25_60096ff607138c1af1a7b4d83b9b0a28_agent-tesla_amadey_cobalt-strike_darkgate_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_satacom_stealc_vidar
- Size 53.2MB
- SHA256 b9534a982d2d5b9741118e95092c8980fba9064d069dedf71c25b79cc43deb43
- MD5 60096ff607138c1af1a7b4d83b9b0a28
- SHA1 9649f3b6106c6e99b6085cb09fc34bdbd0d0a191
- SHA512 67324c03a6c282c060727c300adbd128c94fb35c4280e942df907b12c24ac433d9b3bc8edfd1b01d5790b348cd55c697ca7c85d256e7d4d5831798ac960fd7f7
- SSDEEP 196608:GCK0CK1rCK0CK1CCK0CK1rCK0CK1UCK0CK1rCK0CK1CCK0CK1rCK0CK1tjn:FGRGmGRG4GRGmGRGeD
- TLSH T158C7AE02A7A590BFE66B8970C9239905DF72BC824771A78F13902DEA1D727D05F3E712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.