General
- Target 2026-04-25_94ad2424ad6fe4289ff43d3b34c08eae_agent-tesla_amadey_cobalt-strike_coinminer_cryptbot_darkgate_glassworm_hawkeye_hellokitty_hijackloader_icedid_luca-stealer_njrat_poet-rat_remcos_satacom_smoke-loader_stop_vidar_wannacry
- Size 10.0MB
- Sample260425-dc6m2sdt81
- SHA256 fd399a000f0c29f0a8827cd5a79d5a1c20854fc26a10d3ef148f669eba7fc4a9
- MD5 94ad2424ad6fe4289ff43d3b34c08eae
- SHA1 a4d8add273dcf7ee23037742f96e3b7df539148c
- SHA512 81c588e29738e4d794cb44d59c10e280c56c6d3b8c8e03a303bfae26510a9aac49daa423480bec9e7c0fc6aca225cf375381d7f237c8a9d6ecd1365d05e3ecc4
- SSDEEP 196608:co5aCKooKWQc0gEYnvL4r1yfnHh6ImzD+F:35xvcZEIvuyi
- TLSH T1EBB68C00FAD741B5F6631631497A926F5636BC108B32CACBD3401EAEFE726D15A36723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-04-25_94ad2424ad6fe4289ff43d3b34c08eae_agent-tesla_amadey_cobalt-strike_coinminer_cryptbot_dark.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-25_94ad2424ad6fe4289ff43d3b34c08eae_agent-tesla_amadey_cobalt-strike_coinminer_cryptbot_dark.exe
Resource
win11-20260130-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-25_94ad2424ad6fe4289ff43d3b34c08eae_agent-tesla_amadey_cobalt-strike_coinminer_cryptbot_darkgate_glassworm_hawkeye_hellokitty_hijackloader_icedid_luca-stealer_njrat_poet-rat_remcos_satacom_smoke-loader_stop_vidar_wannacry
- Size 10.0MB
- SHA256 fd399a000f0c29f0a8827cd5a79d5a1c20854fc26a10d3ef148f669eba7fc4a9
- MD5 94ad2424ad6fe4289ff43d3b34c08eae
- SHA1 a4d8add273dcf7ee23037742f96e3b7df539148c
- SHA512 81c588e29738e4d794cb44d59c10e280c56c6d3b8c8e03a303bfae26510a9aac49daa423480bec9e7c0fc6aca225cf375381d7f237c8a9d6ecd1365d05e3ecc4
- SSDEEP 196608:co5aCKooKWQc0gEYnvL4r1yfnHh6ImzD+F:35xvcZEIvuyi
- TLSH T1EBB68C00FAD741B5F6631631497A926F5636BC108B32CACBD3401EAEFE726D15A36723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
AutoIT Executable
AutoIT scripts compiled to PE executables.