General
- Target 2026-04-25_6610cb6aff8a1eff10b5147b7e0370b8_agent-tesla_amadey_cobalt-strike_darkgate_hawkeye_icedid_remcos_satacom_stealc_vidar
- Size 10.3MB
- Sample260425-tb97vae13k
- SHA256 3447c1c94e5cd3b9f4f088eb59a89a55cd52819174e0f2ae4be706b4d953603a
- MD5 6610cb6aff8a1eff10b5147b7e0370b8
- SHA1 59e24a49c19f9123666447f690a6444a3c53961e
- SHA512 5b07a3523cba1c015681887329c5a96ae1e1aa2c9a1e5cc731a8b7188ae04b4804ce66efaabcc1c669b6c5cd89223965df8e318453f78b5fdf2fe95d3ab225ab
- SSDEEP 49152:ah+ZkldoPK8YahFHRBo/ev6XSh+ZkldoPK8YahFHRBo/ev6XpFxMut6O9/Hc29T4:z2cPK8x3atL2cPK8x3atT1/tr37wj
- TLSH T121B65B06676440BAD16A85748922990EE7717C49C723AE8F13902DEEBFF27E05E3D731
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-04-25_6610cb6aff8a1eff10b5147b7e0370b8_agent-tesla_amadey_cobalt-strike_darkgate_hawkeye_icedid.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-25_6610cb6aff8a1eff10b5147b7e0370b8_agent-tesla_amadey_cobalt-strike_darkgate_hawkeye_icedid.exe
Resource
win11-20260130-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-25_6610cb6aff8a1eff10b5147b7e0370b8_agent-tesla_amadey_cobalt-strike_darkgate_hawkeye_icedid_remcos_satacom_stealc_vidar
- Size 10.3MB
- SHA256 3447c1c94e5cd3b9f4f088eb59a89a55cd52819174e0f2ae4be706b4d953603a
- MD5 6610cb6aff8a1eff10b5147b7e0370b8
- SHA1 59e24a49c19f9123666447f690a6444a3c53961e
- SHA512 5b07a3523cba1c015681887329c5a96ae1e1aa2c9a1e5cc731a8b7188ae04b4804ce66efaabcc1c669b6c5cd89223965df8e318453f78b5fdf2fe95d3ab225ab
- SSDEEP 49152:ah+ZkldoPK8YahFHRBo/ev6XSh+ZkldoPK8YahFHRBo/ev6XpFxMut6O9/Hc29T4:z2cPK8x3atL2cPK8x3atT1/tr37wj
- TLSH T121B65B06676440BAD16A85748922990EE7717C49C723AE8F13902DEEBFF27E05E3D731
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
AutoIT Executable
AutoIT scripts compiled to PE executables.