General
- Target 2026-06-30_00d7b4beac415a82d8f2ed7c37bfe273_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_satacom_smoke-loader_stealc_wannacry
- Size 28.6MB
- Sample260701-bmcfvady2z
- SHA256 4d33bc1454f22055245fd33b70e76d62d80a85d63fb182e014a8ad3593e90e11
- MD5 00d7b4beac415a82d8f2ed7c37bfe273
- SHA1 67554ac86b08de2a80ee7a33504c53b238a24fe6
- SHA512 4f6ad6798923d74c09c28f0b7922dda76cafb030959415a88eb93a81c53e7010d93c5307102dc999bc940c147766b81232f4da9d9bf729b81c091be80ae97463
- SSDEEP 196608:equFIF0wuPlCKrjRv8TOEquFIF0wuPlCKrjRv8TOEquFIF0wuPlCKrjRv8TOEquB:/oUm18+oUm18+oUm18+oUm18+
- TLSH T17267AE0273D85475F5B316318B3592A95A3DBCA58E33C98F32883E5D7B70681AA39733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-06-30_00d7b4beac415a82d8f2ed7c37bfe273_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-30_00d7b4beac415a82d8f2ed7c37bfe273_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win11ltsc2024-20260629-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_00d7b4beac415a82d8f2ed7c37bfe273_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_satacom_smoke-loader_stealc_wannacry
- Size 28.6MB
- SHA256 4d33bc1454f22055245fd33b70e76d62d80a85d63fb182e014a8ad3593e90e11
- MD5 00d7b4beac415a82d8f2ed7c37bfe273
- SHA1 67554ac86b08de2a80ee7a33504c53b238a24fe6
- SHA512 4f6ad6798923d74c09c28f0b7922dda76cafb030959415a88eb93a81c53e7010d93c5307102dc999bc940c147766b81232f4da9d9bf729b81c091be80ae97463
- SSDEEP 196608:equFIF0wuPlCKrjRv8TOEquFIF0wuPlCKrjRv8TOEquFIF0wuPlCKrjRv8TOEquB:/oUm18+oUm18+oUm18+oUm18+
- TLSH T17267AE0273D85475F5B316318B3592A95A3DBCA58E33C98F32883E5D7B70681AA39733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables manipulated with Fody
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
AutoIT Executable
AutoIT scripts compiled to PE executables.