General
- Target 2026-04-28_75eaa65c51b2b50af7003cd98449afbb_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hellokitty_hijackloader_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_satacom_smoke-loader_stealc_stop_vidar
- Size 28.2MB
- Sample260428-de7ccsc18s
- SHA256 f405078e51fb532c1e8b6bdc6aed09498676bba1ecf0f43a5af1964a5602ecb3
Score
10/10
Malware Config
Targets
-
- Target 2026-04-28_75eaa65c51b2b50af7003cd98449afbb_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hellokitty_hijackloader_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_satacom_smoke-loader_stealc_stop_vidar
- Size 28.2MB
- SHA256 f405078e51fb532c1e8b6bdc6aed09498676bba1ecf0f43a5af1964a5602ecb3
Score9/10- Custom signature
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
- Custom signature
Detects executables packed with Dotfuscator
- Custom signature
Detects executables packed with SmartAssembly
- Custom signature
Detects executables packed with Yano Obfuscator
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
AutoIT Executable
AutoIT scripts compiled to PE executables.