General
- Target 2026-07-02_ebcf46f80b777704a3c518bc4d729747_agent-tesla_amadey_cobalt-strike_coinminer_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_rugmi_satacom_smoke-loader_stealc_tofsee
- Size 7.5MB
- Sample260702-pybwcagy2n
- SHA256 80b34837c8b670f5e052e5cd2c4ac46ba7cc570b1ca117faef03c937c27f8883
- MD5 ebcf46f80b777704a3c518bc4d729747
- SHA1 27bd768f003f524822eff6eb642be426c2829e0d
- SHA512 82f8af710fdca427398b0eff66dea741969f5d59d529c7afe9b49da07121674c221a028b85248b72415207d754d565fe9b5b2b902258653c85dff67037454db1
- SSDEEP 98304:eKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jR4TUlmLZ1opDbSVHrjSykt:equFIF0wuPlCKrjRGLZ7pjy
- TLSH T16586AE1273D44035F5B316319A3492256A79BCA59F32CA9F338C2D5E7FB16808A3A737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-02_ebcf46f80b777704a3c518bc4d729747_agent-tesla_amadey_cobalt-strike_coinminer_darkgate_glas.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_ebcf46f80b777704a3c518bc4d729747_agent-tesla_amadey_cobalt-strike_coinminer_darkgate_glas.exe
Resource
win11ltsc2024-20260629-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_ebcf46f80b777704a3c518bc4d729747_agent-tesla_amadey_cobalt-strike_coinminer_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_rugmi_satacom_smoke-loader_stealc_tofsee
- Size 7.5MB
- SHA256 80b34837c8b670f5e052e5cd2c4ac46ba7cc570b1ca117faef03c937c27f8883
- MD5 ebcf46f80b777704a3c518bc4d729747
- SHA1 27bd768f003f524822eff6eb642be426c2829e0d
- SHA512 82f8af710fdca427398b0eff66dea741969f5d59d529c7afe9b49da07121674c221a028b85248b72415207d754d565fe9b5b2b902258653c85dff67037454db1
- SSDEEP 98304:eKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jR4TUlmLZ1opDbSVHrjSykt:equFIF0wuPlCKrjRGLZ7pjy
- TLSH T16586AE1273D44035F5B316319A3492256A79BCA59F32CA9F338C2D5E7FB16808A3A737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables manipulated with Fody
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
AutoIT Executable
AutoIT scripts compiled to PE executables.