General
- Target 2026-07-02_194c7355785815e28e153b78c4320ea7_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_satacom_smoke-loader_stealc_stop
- Size 28.7MB
- Sample260703-b4nkfaex4q
- SHA256 a0a7f57bb1a95ada4e4e28fe4ff80a36b11b0bc3a1c7ab90985d2be606552e77
- MD5 194c7355785815e28e153b78c4320ea7
- SHA1 e75ff9947b13164ef65f572134b6b34bbfcb05bf
- SHA512 7f5369303a92a1778f097a3b62c478fc7422658825d561b1070508232bd2cb86ea441ee0e71c72d0d5061e3338bdef2b56191ad24e07dc188dfa909cb2ad349c
- SSDEEP 196608:QquFIF0wuPlCKrjRYrquFIF0wuPlCKrjRYrquFIF0wuPlCKrjRYrquFIF0wuPlCb:poUmdoUmdoUmdoUm97tK
- TLSH T1FC679E1273D44035F5B316319A3592595A7ABCA58F32CA9F33882D5E6FB16C08E3A733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-02_194c7355785815e28e153b78c4320ea7_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_194c7355785815e28e153b78c4320ea7_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win11ltsc2024-20260629-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_194c7355785815e28e153b78c4320ea7_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_satacom_smoke-loader_stealc_stop
- Size 28.7MB
- SHA256 a0a7f57bb1a95ada4e4e28fe4ff80a36b11b0bc3a1c7ab90985d2be606552e77
- MD5 194c7355785815e28e153b78c4320ea7
- SHA1 e75ff9947b13164ef65f572134b6b34bbfcb05bf
- SHA512 7f5369303a92a1778f097a3b62c478fc7422658825d561b1070508232bd2cb86ea441ee0e71c72d0d5061e3338bdef2b56191ad24e07dc188dfa909cb2ad349c
- SSDEEP 196608:QquFIF0wuPlCKrjRYrquFIF0wuPlCKrjRYrquFIF0wuPlCKrjRYrquFIF0wuPlCb:poUmdoUmdoUmdoUm97tK
- TLSH T1FC679E1273D44035F5B316319A3592595A7ABCA58F32CA9F33882D5E6FB16C08E3A733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables manipulated with Fody
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
AutoIT Executable
AutoIT scripts compiled to PE executables.