General
- Target 2026-07-01_d706a6a8e7a3690a87b7494c5ba866e3_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_satacom_smoke-loader_stealc_wannacry
- Size 28.6MB
- Sample260701-ja8yaaa17t
- SHA256 5c2e5813aa702b95391e7b0ee0b3dbc93e6ded3c4aa17707f73ecbf3901c5c86
- MD5 d706a6a8e7a3690a87b7494c5ba866e3
- SHA1 55609ce25df078401e74cc269a73d02c33b3284d
- SHA512 398edf1a5c2fcec79ee1e4fd29c9906af2919ce059adc6e90fd873517f1f0fa65dcca675d6b0fed6d40be7845b96d175ce4686614323e895d11a2b5f0ff7a60d
- SSDEEP 196608:equFIF0wuPlCKrjRv8TOEquFIF0wuPlCKrjRv8TOEquFIF0wuPlCKrjRv8TOEquJ:/oUm18+oUm18+oUm18+oUm18
- TLSH T12167AE0273D85475F5B316318B3592A95A3DBCA58E33C98F32883E5D7B70681AA39733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-01_d706a6a8e7a3690a87b7494c5ba866e3_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_d706a6a8e7a3690a87b7494c5ba866e3_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_d706a6a8e7a3690a87b7494c5ba866e3_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_satacom_smoke-loader_stealc_wannacry
- Size 28.6MB
- SHA256 5c2e5813aa702b95391e7b0ee0b3dbc93e6ded3c4aa17707f73ecbf3901c5c86
- MD5 d706a6a8e7a3690a87b7494c5ba866e3
- SHA1 55609ce25df078401e74cc269a73d02c33b3284d
- SHA512 398edf1a5c2fcec79ee1e4fd29c9906af2919ce059adc6e90fd873517f1f0fa65dcca675d6b0fed6d40be7845b96d175ce4686614323e895d11a2b5f0ff7a60d
- SSDEEP 196608:equFIF0wuPlCKrjRv8TOEquFIF0wuPlCKrjRv8TOEquFIF0wuPlCKrjRv8TOEquJ:/oUm18+oUm18+oUm18+oUm18
- TLSH T12167AE0273D85475F5B316318B3592A95A3DBCA58E33C98F32883E5D7B70681AA39733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables manipulated with Fody
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
AutoIT Executable
AutoIT scripts compiled to PE executables.