General
- Target 2026-07-02_7d7b2d3913f8e76a73db88b4bbe28ecf_agent-tesla_amadey_cobalt-strike_coinminer_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rugmi_satacom_smoke-loader_wannacry
- Size 7.3MB
- Sample260702-qdpgdabz8p
- SHA256 36aaac9e489b8fdb4aed2756c1856ba2ce0b7c2371d9072dd23ab5ac86da83cb
- MD5 7d7b2d3913f8e76a73db88b4bbe28ecf
- SHA1 a6b5b69aa5a23104153878bf85b17069b2311868
- SHA512 3df7e12b971fc844a3e3943ab067ce9b7129f51bd64e60d8c2b8ba3e75b15d7e1d55f1e55c54a338113e30a5ae9cce05ee5a0d5e47ec89fc164e9e20f951c2fa
- SSDEEP 98304:eKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jR4TUxeLZ1opDbSVHrj8:equFIF0wuPlCKrjRveLZ7pj
- TLSH T15E76AE1273D84435F5B316319A3592296A39BCA59F33CA9F328C2D5D7FB16808A36733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-02_7d7b2d3913f8e76a73db88b4bbe28ecf_agent-tesla_amadey_cobalt-strike_coinminer_darkgate_glas.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_7d7b2d3913f8e76a73db88b4bbe28ecf_agent-tesla_amadey_cobalt-strike_coinminer_darkgate_glas.exe
Resource
win11ltsc2024-20260630-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_7d7b2d3913f8e76a73db88b4bbe28ecf_agent-tesla_amadey_cobalt-strike_coinminer_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rugmi_satacom_smoke-loader_wannacry
- Size 7.3MB
- SHA256 36aaac9e489b8fdb4aed2756c1856ba2ce0b7c2371d9072dd23ab5ac86da83cb
- MD5 7d7b2d3913f8e76a73db88b4bbe28ecf
- SHA1 a6b5b69aa5a23104153878bf85b17069b2311868
- SHA512 3df7e12b971fc844a3e3943ab067ce9b7129f51bd64e60d8c2b8ba3e75b15d7e1d55f1e55c54a338113e30a5ae9cce05ee5a0d5e47ec89fc164e9e20f951c2fa
- SSDEEP 98304:eKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jR4TUxeLZ1opDbSVHrj8:equFIF0wuPlCKrjRveLZ7pj
- TLSH T15E76AE1273D84435F5B316319A3592296A39BCA59F33CA9F328C2D5D7FB16808A36733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables manipulated with Fody
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
AutoIT Executable
AutoIT scripts compiled to PE executables.