General
- Target 2026-07-02_c75f78c8016eb0e16c50e729f9df766b_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_satacom_smoke-loader_stealc_tofsee_vidar
- Size 14.7MB
- Sample260703-bgrctahv5y
- SHA256 a36867cf707cd524b29cee10e46deb8d7e1d3ecb40d92cfcbcff40a35695cdeb
- MD5 c75f78c8016eb0e16c50e729f9df766b
- SHA1 2f909529c68575048837e31ffdeb9463c0e9d54f
- SHA512 74639fd3e27227333fabb016e622feda03d51fa41ef25746a0a78ca4a69c81e05a6c6251851ffb643496b300baf9202ee68b7d45ea6de892cccc157dc31c6a95
- SSDEEP 196608:equFIF0wuPlCKrjR58quFIF0wuPlCKrjR5:/oUmZoUm
- TLSH T192F6AE0273D84475F5B316318A3592695A7ABCA58E32CA8F338C2D5E6F716C09E39733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-02_c75f78c8016eb0e16c50e729f9df766b_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_c75f78c8016eb0e16c50e729f9df766b_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win11ltsc2024-20260629-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_c75f78c8016eb0e16c50e729f9df766b_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_satacom_smoke-loader_stealc_tofsee_vidar
- Size 14.7MB
- SHA256 a36867cf707cd524b29cee10e46deb8d7e1d3ecb40d92cfcbcff40a35695cdeb
- MD5 c75f78c8016eb0e16c50e729f9df766b
- SHA1 2f909529c68575048837e31ffdeb9463c0e9d54f
- SHA512 74639fd3e27227333fabb016e622feda03d51fa41ef25746a0a78ca4a69c81e05a6c6251851ffb643496b300baf9202ee68b7d45ea6de892cccc157dc31c6a95
- SSDEEP 196608:equFIF0wuPlCKrjR58quFIF0wuPlCKrjR5:/oUmZoUm
- TLSH T192F6AE0273D84475F5B316318A3592695A7ABCA58E32CA8F338C2D5E6F716C09E39733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables manipulated with Fody
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
AutoIT Executable
AutoIT scripts compiled to PE executables.