General
- Target 2026-07-01_d8648b84600b8b8fd56a0b1a6d87361e_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_rugmi_satacom_smoke-loader_stealc_stop_tofsee
- Size 8.0MB
- Sample260701-t2e5dsas9k
- SHA256 15ead87efb9483bab3bb69b026a4ede6d78841d00fed9470699a279aabddee5e
- MD5 d8648b84600b8b8fd56a0b1a6d87361e
- SHA1 f5a61d1ca112241f0bb991d695e2747d742821e4
- SHA512 6203e525c05b3e70c6a3b04e39ec14615443b8ad65064a61136017554e2d8865e23ce8d5b4447b9361893d148e30f8bd857ca301522b1afce611cecd2c9fd47d
- SSDEEP 98304:eKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jR4TUV5nm9LZ1opDbSVHrj3Z:equFIF0wuPlCKrjRdm9LZ7pj5kRjqvJn
- TLSH T1D886AE1272D44035F5B316329A3892246A79BD659F32CA9F73CC2D5E7FB06808A36737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-01_d8648b84600b8b8fd56a0b1a6d87361e_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_d8648b84600b8b8fd56a0b1a6d87361e_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win11ltsc2024-20260629-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_d8648b84600b8b8fd56a0b1a6d87361e_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_rugmi_satacom_smoke-loader_stealc_stop_tofsee
- Size 8.0MB
- SHA256 15ead87efb9483bab3bb69b026a4ede6d78841d00fed9470699a279aabddee5e
- MD5 d8648b84600b8b8fd56a0b1a6d87361e
- SHA1 f5a61d1ca112241f0bb991d695e2747d742821e4
- SHA512 6203e525c05b3e70c6a3b04e39ec14615443b8ad65064a61136017554e2d8865e23ce8d5b4447b9361893d148e30f8bd857ca301522b1afce611cecd2c9fd47d
- SSDEEP 98304:eKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jR4TUV5nm9LZ1opDbSVHrj3Z:equFIF0wuPlCKrjRdm9LZ7pj5kRjqvJn
- TLSH T1D886AE1272D44035F5B316329A3892246A79BD659F32CA9F73CC2D5E7FB06808A36737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables manipulated with Fody
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
AutoIT Executable
AutoIT scripts compiled to PE executables.