General
- Target 2026-07-01_c22d1efb46670337f56e70fda5381031_agent-tesla_amadey_cobalt-strike_coinminer_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_satacom_smoke-loader_stop_tofsee
- Size 7.8MB
- Sample260701-jlsqfahs5p
- SHA256 dbdcb740a6f2023427a5a8eb863aa9dc8190278f952cdad6e0b88111d2b2237c
- MD5 c22d1efb46670337f56e70fda5381031
- SHA1 23f43caf9c4b92d6d22ad001b6f723c902182982
- SHA512 193c7350aff0cde00399a74b8ae9258ff573266a9c6c1472a6362ab37ce75cdcb39f8c75aa7b9079390010abf90c2b44d1fb2e56f00a497ebf7a35c9c967b675
- SSDEEP 98304:QKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jR4TU67bNOhPPFmh:QquFIF0wuPlCKrjRc7bNOhP8h
- TLSH T1C186AE1272D89475F1B316318A3592655A39BCA54F32CA8F33883D5E7F706C1AA3A733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-01_c22d1efb46670337f56e70fda5381031_agent-tesla_amadey_cobalt-strike_coinminer_darkgate_glas.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_c22d1efb46670337f56e70fda5381031_agent-tesla_amadey_cobalt-strike_coinminer_darkgate_glas.exe
Resource
win11ltsc2024-20260629-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_c22d1efb46670337f56e70fda5381031_agent-tesla_amadey_cobalt-strike_coinminer_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_satacom_smoke-loader_stop_tofsee
- Size 7.8MB
- SHA256 dbdcb740a6f2023427a5a8eb863aa9dc8190278f952cdad6e0b88111d2b2237c
- MD5 c22d1efb46670337f56e70fda5381031
- SHA1 23f43caf9c4b92d6d22ad001b6f723c902182982
- SHA512 193c7350aff0cde00399a74b8ae9258ff573266a9c6c1472a6362ab37ce75cdcb39f8c75aa7b9079390010abf90c2b44d1fb2e56f00a497ebf7a35c9c967b675
- SSDEEP 98304:QKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jR4TU67bNOhPPFmh:QquFIF0wuPlCKrjRc7bNOhP8h
- TLSH T1C186AE1272D89475F1B316318A3592655A39BCA54F32CA8F33883D5E7F706C1AA3A733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables manipulated with Fody
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
AutoIT Executable
AutoIT scripts compiled to PE executables.