General
- Target 2026-05-05_8a4ad47cb2b406854b6d782debe6d5e0_agent-tesla_elex_hawkeye_maze_netwire_remcos_xloader
- Size 1.4MB
- Sample260505-ejctzsf12w
- SHA256 c9f53ca38da83f833787f08dfaf870be75c76174cb83f3afd4bc32a4e2ff9ee6
- MD5 8a4ad47cb2b406854b6d782debe6d5e0
- SHA1 87178743d8e1fb696e9bf72af71dda6f4d6eb626
- SHA512 50f3f0903ef316c2aa0b28219ea06112a8ba36148d47f87b73fa9dc76da62d2e9cf0cf7b66bfcef739a48c930de74cf0595dcfb135a4c03db10f08988cea39a8
- SSDEEP 24576:du6J3xO0c+JY5UZ+XCHkGsoEAdx20W4njUprvVcC1f2o5RRfgR:vo0c++OCokGs7Adgrd1f26RO
- TLSH T1B765BE52E38EC2F0DE165172BA7DF73A1E3B3C254530B9566FC5ED3AAD21021112DAA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-05-05_8a4ad47cb2b406854b6d782debe6d5e0_agent-tesla_elex_hawkeye_maze_netwire_remcos_xloader.exe
Resource
win10v2004-20260130-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-05_8a4ad47cb2b406854b6d782debe6d5e0_agent-tesla_elex_hawkeye_maze_netwire_remcos_xloader
- Size 1.4MB
- SHA256 c9f53ca38da83f833787f08dfaf870be75c76174cb83f3afd4bc32a4e2ff9ee6
- MD5 8a4ad47cb2b406854b6d782debe6d5e0
- SHA1 87178743d8e1fb696e9bf72af71dda6f4d6eb626
- SHA512 50f3f0903ef316c2aa0b28219ea06112a8ba36148d47f87b73fa9dc76da62d2e9cf0cf7b66bfcef739a48c930de74cf0595dcfb135a4c03db10f08988cea39a8
- SSDEEP 24576:du6J3xO0c+JY5UZ+XCHkGsoEAdx20W4njUprvVcC1f2o5RRfgR:vo0c++OCokGs7Adgrd1f26RO
- TLSH T1B765BE52E38EC2F0DE165172BA7DF73A1E3B3C254530B9566FC5ED3AAD21021112DAA3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
NetWire RAT payload
-
AutoIT Executable
AutoIT scripts compiled to PE executables.