General
- Target 2026-06-26_102a7d7e8ba6bad341ab08f5a91f64e3_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_satacom_smoke-loader_stealc_stop
- Size 6.4MB
- Sample260629-wsjsbsbv7y
- SHA256 cbf57c9025288c12c91d7d75fac26d2298022929af584a86c2a08cd6c19a4a40
- MD5 102a7d7e8ba6bad341ab08f5a91f64e3
- SHA1 b068bc8fb2abadf077fa93d4ec462cb68252ff70
- SHA512 c8127d3bd85713d75a96496951a9706deca8525232425611882ad1ec9f7f56d6b50953ce19f5aa28e7f09e7fd6d856c201d47a9a5831fb46fad5ee9f21c48bdc
- SSDEEP 98304:eKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jR4TUL3GP5nc:equFIF0wuPlCKrjRBoc
- TLSH T184669F1273D88435F5B31631993592295A7ABCA58E33C99F338C2D5E7FB06808A39737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-06-26_102a7d7e8ba6bad341ab08f5a91f64e3_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-26_102a7d7e8ba6bad341ab08f5a91f64e3_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win11ltsc2024-20260629-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-26_102a7d7e8ba6bad341ab08f5a91f64e3_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_satacom_smoke-loader_stealc_stop
- Size 6.4MB
- SHA256 cbf57c9025288c12c91d7d75fac26d2298022929af584a86c2a08cd6c19a4a40
- MD5 102a7d7e8ba6bad341ab08f5a91f64e3
- SHA1 b068bc8fb2abadf077fa93d4ec462cb68252ff70
- SHA512 c8127d3bd85713d75a96496951a9706deca8525232425611882ad1ec9f7f56d6b50953ce19f5aa28e7f09e7fd6d856c201d47a9a5831fb46fad5ee9f21c48bdc
- SSDEEP 98304:eKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jR4TUL3GP5nc:equFIF0wuPlCKrjRBoc
- TLSH T184669F1273D88435F5B31631993592295A7ABCA58E33C99F338C2D5E7FB06808A39737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables manipulated with Fody
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
AutoIT Executable
AutoIT scripts compiled to PE executables.