General
- Target 2026-06-02_6261a5eb5cdc5f9ce61ba9bdeb00094f_agent-tesla_amadey_avoslocker_cobalt-strike_darkgate_elex_glassworm_hawkeye_hellokitty_hijackloader_luca-stealer_lynx_njrat_remcos_rhadamanthys_smoke-loader_stealc_stop_vidar
- Size 15.6MB
- Sample260602-sm2jeahy9q
- SHA256 593f5971adf9e476947f3717e1c6157c263bbaed66edb3444b395e45c9bd0c95
- MD5 6261a5eb5cdc5f9ce61ba9bdeb00094f
- SHA1 bbebc1ad0c02972234179522064beaf35817ff31
- SHA512 9501c892d08bd4e07718bcdf36de67576fbb833fafe4ef742b80c1f461fa060b8dd1b4c6718edf1a54463aae7413e5ddbf8cc54352630c903c3203cdb8a4c7d6
- SSDEEP 196608:f3KWQc0gEYnvLhCKN3KWQc0gEYnvLhCKN3KWQc0gEYnvLhCK81yRTjfV:GcZEIvUPcZEIvUPcZEIvULyFR
- TLSH T147F6BF0177E48035F5B716329E7AA2615A7EBC615F32C78F23842A6D2E706D0DB39723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
2026-06-02_6261a5eb5cdc5f9ce61ba9bdeb00094f_agent-tesla_amadey_avoslocker_cobalt-strike_darkgate_ele.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-02_6261a5eb5cdc5f9ce61ba9bdeb00094f_agent-tesla_amadey_avoslocker_cobalt-strike_darkgate_ele.exe
Resource
win11-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-02_6261a5eb5cdc5f9ce61ba9bdeb00094f_agent-tesla_amadey_avoslocker_cobalt-strike_darkgate_elex_glassworm_hawkeye_hellokitty_hijackloader_luca-stealer_lynx_njrat_remcos_rhadamanthys_smoke-loader_stealc_stop_vidar
- Size 15.6MB
- SHA256 593f5971adf9e476947f3717e1c6157c263bbaed66edb3444b395e45c9bd0c95
- MD5 6261a5eb5cdc5f9ce61ba9bdeb00094f
- SHA1 bbebc1ad0c02972234179522064beaf35817ff31
- SHA512 9501c892d08bd4e07718bcdf36de67576fbb833fafe4ef742b80c1f461fa060b8dd1b4c6718edf1a54463aae7413e5ddbf8cc54352630c903c3203cdb8a4c7d6
- SSDEEP 196608:f3KWQc0gEYnvLhCKN3KWQc0gEYnvLhCKN3KWQc0gEYnvLhCK81yRTjfV:GcZEIvUPcZEIvUPcZEIvULyFR
- TLSH T147F6BF0177E48035F5B716329E7AA2615A7EBC615F32C78F23842A6D2E706D0DB39723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.