General
- Target 2026-06-27_e3a4da1290cba77b4afde62697d6ad52_agent-tesla_amadey_cobalt-strike_coinminer_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_rugmi_satacom_smoke-loader_stealc_stop_tofsee
- Size 7.5MB
- Sample260629-cdd4rabz3j
- SHA256 cf8a2209f03487f52d99edb8cf2859e94c73de6bb716191faa91aafd555ed80f
- MD5 e3a4da1290cba77b4afde62697d6ad52
- SHA1 0c5b263675fbbaaf5c59c1ac0c3aafd3e8ac4fc2
- SHA512 248ba787e3ecb829ce3a4d9de9320f955b72f95d6a4aa2b0a8347412d9105247590fa730b2d81a2b4801e8c41133754fdadb136fc45f94d9d0579993675c11cc
- SSDEEP 98304:eKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jR4TUDr9LZ1opDbSVHrjK:equFIF0wuPlCKrjRV9LZ7pjK
- TLSH T1E186AE1272D44035F5B316319A3592656A79BCA58F32CA9F338C2D5E7FB16C08A3A733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-06-27_e3a4da1290cba77b4afde62697d6ad52_agent-tesla_amadey_cobalt-strike_coinminer_darkgate_glas.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_e3a4da1290cba77b4afde62697d6ad52_agent-tesla_amadey_cobalt-strike_coinminer_darkgate_glas.exe
Resource
win11ltsc2024-20260618-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_e3a4da1290cba77b4afde62697d6ad52_agent-tesla_amadey_cobalt-strike_coinminer_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_rugmi_satacom_smoke-loader_stealc_stop_tofsee
- Size 7.5MB
- SHA256 cf8a2209f03487f52d99edb8cf2859e94c73de6bb716191faa91aafd555ed80f
- MD5 e3a4da1290cba77b4afde62697d6ad52
- SHA1 0c5b263675fbbaaf5c59c1ac0c3aafd3e8ac4fc2
- SHA512 248ba787e3ecb829ce3a4d9de9320f955b72f95d6a4aa2b0a8347412d9105247590fa730b2d81a2b4801e8c41133754fdadb136fc45f94d9d0579993675c11cc
- SSDEEP 98304:eKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jR4TUDr9LZ1opDbSVHrjK:equFIF0wuPlCKrjRV9LZ7pjK
- TLSH T1E186AE1272D44035F5B316319A3592656A79BCA58F32CA9F338C2D5E7FB16C08A3A733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables manipulated with Fody
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
AutoIT Executable
AutoIT scripts compiled to PE executables.