General
- Target 2026-06-29_c7f64eea58534b1a08b361feff1c90db_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_satacom_smoke-loader_stealc_tofsee_wannacry
- Size 28.5MB
- Sample260630-d8tncsev3k
- SHA256 02f101e7d73ae73e1499740ade9cf801228bd45253e20d6f97245eef2b24559d
- MD5 c7f64eea58534b1a08b361feff1c90db
- SHA1 ed9211f134fcefd905c72971bd336bcd334b6c5d
- SHA512 e6f297afb1e47f37a5b49c81b9d54bd062c2bf89f15585c089ea485141942bb2103e3ef90d8b473201b787cb360688839c333d17da1d9914e0ecc40d551a8aec
- SSDEEP 196608:equFIF0wuPlCKrjRnzgquFIF0wuPlCKrjRnzgquFIF0wuPlCKrjRnzgquFIF0wud:/oUm7oUm7oUm7oUm
- TLSH T10D679E1273D44035F5B316318A7592599A7ABCA58F33CA8F338C2D9E6F716808A39737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-06-29_c7f64eea58534b1a08b361feff1c90db_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-29_c7f64eea58534b1a08b361feff1c90db_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win11ltsc2024-20260629-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-29_c7f64eea58534b1a08b361feff1c90db_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_satacom_smoke-loader_stealc_tofsee_wannacry
- Size 28.5MB
- SHA256 02f101e7d73ae73e1499740ade9cf801228bd45253e20d6f97245eef2b24559d
- MD5 c7f64eea58534b1a08b361feff1c90db
- SHA1 ed9211f134fcefd905c72971bd336bcd334b6c5d
- SHA512 e6f297afb1e47f37a5b49c81b9d54bd062c2bf89f15585c089ea485141942bb2103e3ef90d8b473201b787cb360688839c333d17da1d9914e0ecc40d551a8aec
- SSDEEP 196608:equFIF0wuPlCKrjRnzgquFIF0wuPlCKrjRnzgquFIF0wuPlCKrjRnzgquFIF0wud:/oUm7oUm7oUm7oUm
- TLSH T10D679E1273D44035F5B316318A7592599A7ABCA58F33CA8F338C2D9E6F716808A39737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables manipulated with Fody
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
AutoIT Executable
AutoIT scripts compiled to PE executables.