General
- Target 2026-07-03_57d79b76759b4e998d7110a08810aaad_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_satacom_smoke-loader_stop_tofsee_vidar
- Size 7.9MB
- Sample260703-dklmvaax4y
- SHA256 e7df38739265329b99825be009288cf58976d79088eea2368dce2d6cb4e9d247
- MD5 57d79b76759b4e998d7110a08810aaad
- SHA1 8f57b077cd275aa71ea1cbc5cf81d6ec2a44cb13
- SHA512 6a999060a900b2f56e66087702bb59a21cfe330b3de7c18c78f1ebb9a67bbf106668d8856d739cad99283a15be7f27e78a598b75bc236b85aa34fcef4dfd58df
- SSDEEP 98304:QKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jR4TU67bNOhYv:QquFIF0wuPlCKrjRc7bNOav
- TLSH T13A86AE0273D85475F1B316318A3592A55A39BCA54F32CA8F33883E5E6F716C1AA39733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-03_57d79b76759b4e998d7110a08810aaad_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-03_57d79b76759b4e998d7110a08810aaad_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win11ltsc2024-20260629-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_57d79b76759b4e998d7110a08810aaad_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_satacom_smoke-loader_stop_tofsee_vidar
- Size 7.9MB
- SHA256 e7df38739265329b99825be009288cf58976d79088eea2368dce2d6cb4e9d247
- MD5 57d79b76759b4e998d7110a08810aaad
- SHA1 8f57b077cd275aa71ea1cbc5cf81d6ec2a44cb13
- SHA512 6a999060a900b2f56e66087702bb59a21cfe330b3de7c18c78f1ebb9a67bbf106668d8856d739cad99283a15be7f27e78a598b75bc236b85aa34fcef4dfd58df
- SSDEEP 98304:QKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jR4TU67bNOhYv:QquFIF0wuPlCKrjRc7bNOav
- TLSH T13A86AE0273D85475F1B316318A3592A55A39BCA54F32CA8F33883E5E6F716C1AA39733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables manipulated with Fody
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
AutoIT Executable
AutoIT scripts compiled to PE executables.