General
- Target 2026-06-30_b2b047159e7d0ee6e08de0ad17d58a55_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_rugmi_satacom_smoke-loader_stop_vidar
- Size 10.2MB
- Sample260701-dsppgafs5t
- SHA256 3bb7a90ec9190ec22f80551ff2107485b50bf792895d208372a0c4f919a20ebd
- MD5 b2b047159e7d0ee6e08de0ad17d58a55
- SHA1 a4ce5629c513b7fd49aa01f4951a8553f1c731a9
- SHA512 cf71bc889c3ae76dde64db111a146b886810feb44387704c568033e1a0361f5cb916ecf5472316fbba342e8a1ea35127002bc1c21e46372a2cdd2a09aa646754
- SSDEEP 98304:QKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jR4TU+ETLZ1opDbSVHrjtOU6:QquFIF0wuPlCKrjRQETLZ7pjtFIF0wuQ
- TLSH T18BB6AE1276D58031F1B312319A7592656A79BCA58B32CADF33CC295E6F716C08E36B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-06-30_b2b047159e7d0ee6e08de0ad17d58a55_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-30_b2b047159e7d0ee6e08de0ad17d58a55_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win11ltsc2024-20260629-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_b2b047159e7d0ee6e08de0ad17d58a55_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_rugmi_satacom_smoke-loader_stop_vidar
- Size 10.2MB
- SHA256 3bb7a90ec9190ec22f80551ff2107485b50bf792895d208372a0c4f919a20ebd
- MD5 b2b047159e7d0ee6e08de0ad17d58a55
- SHA1 a4ce5629c513b7fd49aa01f4951a8553f1c731a9
- SHA512 cf71bc889c3ae76dde64db111a146b886810feb44387704c568033e1a0361f5cb916ecf5472316fbba342e8a1ea35127002bc1c21e46372a2cdd2a09aa646754
- SSDEEP 98304:QKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jR4TU+ETLZ1opDbSVHrjtOU6:QquFIF0wuPlCKrjRQETLZ7pjtFIF0wuQ
- TLSH T18BB6AE1276D58031F1B312319A7592656A79BCA58B32CADF33CC295E6F716C08E36B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables manipulated with Fody
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
AutoIT Executable
AutoIT scripts compiled to PE executables.