General
- Target 2026-06-29_c8008d3f457f80780becc079244c5d7c_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_satacom_smoke-loader_stealc_tofsee_wannacry
- Size 28.5MB
- Sample260630-d8qlpsev2q
- SHA256 16b55edfb840978e7f5c70c589a6ab8a398e59390699322bbb4977c78e2d8297
- MD5 c8008d3f457f80780becc079244c5d7c
- SHA1 708317f1bc1d2477c4fb3b4b516f94bdaa22c21d
- SHA512 cac1f3fd063f128f41b521a9240b70f8d2b2e1dd2fc994fce7ef4eb8ad8c392a05a9f284030fdbf21c928e247e677effac16dec208ac418d72802d735e30759d
- SSDEEP 196608:equFIF0wuPlCKrjRnzgquFIF0wuPlCKrjRnzgquFIF0wuPlCKrjRnzgquFIF0wul:/oUm7oUm7oUm7oUm5
- TLSH T1FE679E1273D44035F5B316318A7592599A7ABCA58F33CA8F338C2D9E6F716808A39737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-06-29_c8008d3f457f80780becc079244c5d7c_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-29_c8008d3f457f80780becc079244c5d7c_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win11ltsc2024-20260629-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-29_c8008d3f457f80780becc079244c5d7c_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_satacom_smoke-loader_stealc_tofsee_wannacry
- Size 28.5MB
- SHA256 16b55edfb840978e7f5c70c589a6ab8a398e59390699322bbb4977c78e2d8297
- MD5 c8008d3f457f80780becc079244c5d7c
- SHA1 708317f1bc1d2477c4fb3b4b516f94bdaa22c21d
- SHA512 cac1f3fd063f128f41b521a9240b70f8d2b2e1dd2fc994fce7ef4eb8ad8c392a05a9f284030fdbf21c928e247e677effac16dec208ac418d72802d735e30759d
- SSDEEP 196608:equFIF0wuPlCKrjRnzgquFIF0wuPlCKrjRnzgquFIF0wuPlCKrjRnzgquFIF0wul:/oUm7oUm7oUm7oUm5
- TLSH T1FE679E1273D44035F5B316318A7592599A7ABCA58F33CA8F338C2D9E6F716808A39737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables manipulated with Fody
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
AutoIT Executable
AutoIT scripts compiled to PE executables.