General
- Target 2026-04-26_7bf90c0e2638a8f4b237858f8c42d03e_agent-tesla_amadey_cobalt-strike_coinminer_cryptbot_darkgate_glassworm_hawkeye_icedid_poet-rat_remcos_satacom
- Size 9.9MB
- Sample260426-cb9smscs6v
- SHA256 983cbcd7971352a67b32ad495e3fda4bc0120f7cbb7e6a36eb44ce337571a3a3
- MD5 7bf90c0e2638a8f4b237858f8c42d03e
- SHA1 7bb9a084d5575534e9905d82598eeb4e10de8132
- SHA512 4dbefc466436b48f3febed24dd5d8712238768fe9733e902f7df0d248178bbfec63dc4f0ef1a677082e81bd79ee51ae005bbcd658f87b265db45c468f62640ca
- SSDEEP 98304:X2cPK8xO2cPK8x07pp1/fh6ImzzJoDfuBcMv+A73XA:GCK0CK71Hh6ImzD+F
- TLSH T1C6A68D01EBD750BAE65749308967921F9731BC058732DBCFD3402EDAAE726D15E3A322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-04-26_7bf90c0e2638a8f4b237858f8c42d03e_agent-tesla_amadey_cobalt-strike_coinminer_cryptbot_dark.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-26_7bf90c0e2638a8f4b237858f8c42d03e_agent-tesla_amadey_cobalt-strike_coinminer_cryptbot_dark.exe
Resource
win11-20260130-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-26_7bf90c0e2638a8f4b237858f8c42d03e_agent-tesla_amadey_cobalt-strike_coinminer_cryptbot_darkgate_glassworm_hawkeye_icedid_poet-rat_remcos_satacom
- Size 9.9MB
- SHA256 983cbcd7971352a67b32ad495e3fda4bc0120f7cbb7e6a36eb44ce337571a3a3
- MD5 7bf90c0e2638a8f4b237858f8c42d03e
- SHA1 7bb9a084d5575534e9905d82598eeb4e10de8132
- SHA512 4dbefc466436b48f3febed24dd5d8712238768fe9733e902f7df0d248178bbfec63dc4f0ef1a677082e81bd79ee51ae005bbcd658f87b265db45c468f62640ca
- SSDEEP 98304:X2cPK8xO2cPK8x07pp1/fh6ImzzJoDfuBcMv+A73XA:GCK0CK71Hh6ImzD+F
- TLSH T1C6A68D01EBD750BAE65749308967921F9731BC058732DBCFD3402EDAAE726D15E3A322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
AutoIT Executable
AutoIT scripts compiled to PE executables.