General
- Target 2026-04-26_883799988e3912ff0a4ae40ee77aa753_agent-tesla_amadey_cobalt-strike_darkgate_hawkeye_hellokitty_hijackloader_icedid_luca-stealer_njrat_remcos_satacom_smoke-loader_wannacry
- Size 3.5MB
- Sample260426-cddszsdz8m
- SHA256 8105574d1e9cf38effb845b7c4d19f18777b30649fb65f65a181512a0740c373
- MD5 883799988e3912ff0a4ae40ee77aa753
- SHA1 959f825c2e170d058c6c9d872286cee7c9981564
- SHA512 7ad6013029d2feef3da380a0a65940a2aa899393cee9811ebc8e7a519615bd57054f10adb58445491ea357b93b83ad9a1dc5004464129f5b998816917933b116
- SSDEEP 49152:Ah+ZkldoPK8YahFHRBbKjKWQc2b1FVgbjrjxPe1pbPSQm1Flo+LjQpT:h2cPK8x3bKjKWQckVgtev5mnlNLkpT
- TLSH T1B706C0027B9080B6E96649318A21E60D9775BC55C6238E4F23942EEEFFF16D05F2D732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-04-26_883799988e3912ff0a4ae40ee77aa753_agent-tesla_amadey_cobalt-strike_darkgate_hawkeye_hellok.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-26_883799988e3912ff0a4ae40ee77aa753_agent-tesla_amadey_cobalt-strike_darkgate_hawkeye_hellok.exe
Resource
win11-20260130-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-26_883799988e3912ff0a4ae40ee77aa753_agent-tesla_amadey_cobalt-strike_darkgate_hawkeye_hellokitty_hijackloader_icedid_luca-stealer_njrat_remcos_satacom_smoke-loader_wannacry
- Size 3.5MB
- SHA256 8105574d1e9cf38effb845b7c4d19f18777b30649fb65f65a181512a0740c373
- MD5 883799988e3912ff0a4ae40ee77aa753
- SHA1 959f825c2e170d058c6c9d872286cee7c9981564
- SHA512 7ad6013029d2feef3da380a0a65940a2aa899393cee9811ebc8e7a519615bd57054f10adb58445491ea357b93b83ad9a1dc5004464129f5b998816917933b116
- SSDEEP 49152:Ah+ZkldoPK8YahFHRBbKjKWQc2b1FVgbjrjxPe1pbPSQm1Flo+LjQpT:h2cPK8x3bKjKWQckVgtev5mnlNLkpT
- TLSH T1B706C0027B9080B6E96649318A21E60D9775BC55C6238E4F23942EEEFFF16D05F2D732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
AutoIT Executable
AutoIT scripts compiled to PE executables.