General
- Target 2026-05-02_68f0d3d85271d262a2c291ecf7c58443_agent-tesla_amadey_avoslocker_cobalt-strike_darkgate_elex_hawkeye_hijackloader_icedid_luca-stealer_lynx_njrat_play_redline-stealer_remcos_rhadamanthys_stealc_stop_vidar
- Size 20.9MB
- Sample260502-ftgrcsds6r
- SHA256 7bb34b045ecb660c5ffc7fa9250044c7088fec41891fe5808b043c1ac5f81d92
- MD5 68f0d3d85271d262a2c291ecf7c58443
- SHA1 0c6255619b7d706a9d0b63dffe10a88d08906c3e
- SHA512 c5c07c6198bc2c2bdec4e3f05b42e34521d37fbf0b1737ac36e07a8860628796d22b86f3ec80533b9bf4ffa85370485483e0d60bb3f4ecc760dc1d567de0a3a5
- SSDEEP 196608:f7mtvwOrCK0ujW1yMzDCX7mtvwOrCK0ujW1yMKC+CX7mtvwOrCK0ujW1yMz:QvwAEyEDZvwAEyBrZvwAEyE
- TLSH T143275B1177E49975F1B716314A7592584A3ABC208F32CACF22843E9EBFB16C1A935733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-05-02_68f0d3d85271d262a2c291ecf7c58443_agent-tesla_amadey_avoslocker_cobalt-strike_darkgate_ele.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-02_68f0d3d85271d262a2c291ecf7c58443_agent-tesla_amadey_avoslocker_cobalt-strike_darkgate_ele.exe
Resource
win11-20260130-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-02_68f0d3d85271d262a2c291ecf7c58443_agent-tesla_amadey_avoslocker_cobalt-strike_darkgate_elex_hawkeye_hijackloader_icedid_luca-stealer_lynx_njrat_play_redline-stealer_remcos_rhadamanthys_stealc_stop_vidar
- Size 20.9MB
- SHA256 7bb34b045ecb660c5ffc7fa9250044c7088fec41891fe5808b043c1ac5f81d92
- MD5 68f0d3d85271d262a2c291ecf7c58443
- SHA1 0c6255619b7d706a9d0b63dffe10a88d08906c3e
- SHA512 c5c07c6198bc2c2bdec4e3f05b42e34521d37fbf0b1737ac36e07a8860628796d22b86f3ec80533b9bf4ffa85370485483e0d60bb3f4ecc760dc1d567de0a3a5
- SSDEEP 196608:f7mtvwOrCK0ujW1yMzDCX7mtvwOrCK0ujW1yMKC+CX7mtvwOrCK0ujW1yMz:QvwAEyEDZvwAEyBrZvwAEyE
- TLSH T143275B1177E49975F1B716314A7592584A3ABC208F32CACF22843E9EBFB16C1A935733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.