General
- Target 2026-06-28_f07f06bf179256f6e600a22c8e677e0a_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_rugmi_satacom_smoke-loader_stop
- Size 7.8MB
- Sample260628-wnb7pabs8l
- SHA256 701492f17a189486588fa35e22ccb6f1f74c32dfb117d6c75f5eadf386a02b9f
- MD5 f07f06bf179256f6e600a22c8e677e0a
- SHA1 84ed2a41a5e710f1ec59cd2910447453f8046ae1
- SHA512 9a73e52ff110a143ce0479c8bcad28d7a1e32df037f736f032f50f222ed74444d9128a0a8a5f2ea8dff6eb65b33911b9c82baac12bf5edd4b1a7d405aa88f57c
- SSDEEP 98304:QKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jR4TUxKF6x4LZ1opDbSVHrjK:QquFIF0wuPlCKrjRvl4LZ7pjK
- TLSH T15886AE1272D85475F1B316319A3492256A39BCA54F32CA9F33882D5E7FB16C09E3A733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-06-28_f07f06bf179256f6e600a22c8e677e0a_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-28_f07f06bf179256f6e600a22c8e677e0a_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win11ltsc2024-20260618-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_f07f06bf179256f6e600a22c8e677e0a_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_rugmi_satacom_smoke-loader_stop
- Size 7.8MB
- SHA256 701492f17a189486588fa35e22ccb6f1f74c32dfb117d6c75f5eadf386a02b9f
- MD5 f07f06bf179256f6e600a22c8e677e0a
- SHA1 84ed2a41a5e710f1ec59cd2910447453f8046ae1
- SHA512 9a73e52ff110a143ce0479c8bcad28d7a1e32df037f736f032f50f222ed74444d9128a0a8a5f2ea8dff6eb65b33911b9c82baac12bf5edd4b1a7d405aa88f57c
- SSDEEP 98304:QKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jR4TUxKF6x4LZ1opDbSVHrjK:QquFIF0wuPlCKrjRvl4LZ7pjK
- TLSH T15886AE1272D85475F1B316319A3492256A39BCA54F32CA9F33882D5E7FB16C09E3A733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables manipulated with Fody
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
AutoIT Executable
AutoIT scripts compiled to PE executables.