General
- Target 2026-05-02_0ba2c06befe691478cbab9b626f38093_agent-tesla_amadey_avoslocker_cobalt-strike_coinminer_darkgate_elex_glassworm_hawkeye_hellokitty_hijackloader_luca-stealer_lynx_njrat_remcos_rhadamanthys_smoke-loader_stealc_stop_vidar
- Size 28.1MB
- Sample260502-e9wpsacz8j
- SHA256 fb809d62719121f26e794583f980ea0c2b21d908166c338e9640a62a8bda9aa5
- MD5 0ba2c06befe691478cbab9b626f38093
- SHA1 95bac2a7d4f3901a9206c185e465cdfe0f82d7d2
- SHA512 a0fee69a873cf53e6eed7800478066ffb8f17b763ba94745cfd55b612bb87e5a0ac8268d81e4e3482f1659f21a19bde93cda6b42231b6d159b3efff7cdb6956b
- SSDEEP 393216:GcZEIvUGMcZEIvUGTy5cZEIvUGMcZEIvUGMcZEIvUGTyG:nEIvJ5EIvJT7EIvJ5EIvJ5EIvJTn
- TLSH T15357BF01B7E48136F5F317319E7A92615A7BBC615E31C68F33843A2D2E716D0AA39723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
2026-05-02_0ba2c06befe691478cbab9b626f38093_agent-tesla_amadey_avoslocker_cobalt-strike_coinminer_da.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-02_0ba2c06befe691478cbab9b626f38093_agent-tesla_amadey_avoslocker_cobalt-strike_coinminer_da.exe
Resource
win11-20260130-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-02_0ba2c06befe691478cbab9b626f38093_agent-tesla_amadey_avoslocker_cobalt-strike_coinminer_darkgate_elex_glassworm_hawkeye_hellokitty_hijackloader_luca-stealer_lynx_njrat_remcos_rhadamanthys_smoke-loader_stealc_stop_vidar
- Size 28.1MB
- SHA256 fb809d62719121f26e794583f980ea0c2b21d908166c338e9640a62a8bda9aa5
- MD5 0ba2c06befe691478cbab9b626f38093
- SHA1 95bac2a7d4f3901a9206c185e465cdfe0f82d7d2
- SHA512 a0fee69a873cf53e6eed7800478066ffb8f17b763ba94745cfd55b612bb87e5a0ac8268d81e4e3482f1659f21a19bde93cda6b42231b6d159b3efff7cdb6956b
- SSDEEP 393216:GcZEIvUGMcZEIvUGTy5cZEIvUGMcZEIvUGMcZEIvUGTyG:nEIvJ5EIvJT7EIvJ5EIvJ5EIvJTn
- TLSH T15357BF01B7E48136F5F317319E7A92615A7BBC615E31C68F33843A2D2E716D0AA39723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.