General
- Target 2026-06-27_a531e6e5c2b86eecb674aca2a2af38c5_agent-tesla_amadey_cobalt-strike_coinminer_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_satacom_smoke-loader_stealc_vidar
- Size 7.2MB
- Sample260629-ex6dfsd18m
- SHA256 590eabfb00127b5cc553eba014b18c40e84bbd9a41fca75415c09e02d61ea03f
- MD5 a531e6e5c2b86eecb674aca2a2af38c5
- SHA1 87bab9c494d22d3c7fbfb7c3372cfa0481af50b9
- SHA512 0d48b1622c17ff85071b474b8ed5d0f1d51b4892be902fcec07935dbff6740aed404e1dc3f282208ebd83dde3c791a3f28680ce1b6cff64cd268bb3fc4812524
- SSDEEP 98304:BllRbn7OQg2cPK8xOOU/jIEeQfoR/IuOFVjUu55MOU/jIEeQfoR/IuOFVjUu55K://bnSQjCKtFIF0wuXMFIF0wuXK
- TLSH T19376BE1276E48432F5B312329EB8D2149A79B8A6473285DF73CC165E5F31AC18E36F63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-06-27_a531e6e5c2b86eecb674aca2a2af38c5_agent-tesla_amadey_cobalt-strike_coinminer_darkgate_glas.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_a531e6e5c2b86eecb674aca2a2af38c5_agent-tesla_amadey_cobalt-strike_coinminer_darkgate_glas.exe
Resource
win11ltsc2024-20260618-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_a531e6e5c2b86eecb674aca2a2af38c5_agent-tesla_amadey_cobalt-strike_coinminer_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_satacom_smoke-loader_stealc_vidar
- Size 7.2MB
- SHA256 590eabfb00127b5cc553eba014b18c40e84bbd9a41fca75415c09e02d61ea03f
- MD5 a531e6e5c2b86eecb674aca2a2af38c5
- SHA1 87bab9c494d22d3c7fbfb7c3372cfa0481af50b9
- SHA512 0d48b1622c17ff85071b474b8ed5d0f1d51b4892be902fcec07935dbff6740aed404e1dc3f282208ebd83dde3c791a3f28680ce1b6cff64cd268bb3fc4812524
- SSDEEP 98304:BllRbn7OQg2cPK8xOOU/jIEeQfoR/IuOFVjUu55MOU/jIEeQfoR/IuOFVjUu55K://bnSQjCKtFIF0wuXMFIF0wuXK
- TLSH T19376BE1276E48432F5B312329EB8D2149A79B8A6473285DF73CC165E5F31AC18E36F63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
AutoIT Executable
AutoIT scripts compiled to PE executables.