General
- Target 2026-07-03_2cd8005d751a5ff68155292fc9b1ade4_agent-tesla_amadey_cobalt-strike_coinminer_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_rugmi_satacom_smoke-loader_stealc
- Size 7.6MB
- Sample260703-dsdbfafx7j
- SHA256 abb985f8b224cb1eb3982654c3616e3e0065c94cf6803eee6c96b18b34ae65c0
- MD5 2cd8005d751a5ff68155292fc9b1ade4
- SHA1 cea66deca776810d3211402c62296d43cb42495e
- SHA512 69faea1cc12b719241222b30de73e3e84a269da7cec7d8fb830a225e1031b2e99ad3958f188535257a587ef0d20860abf1fd567735625ab28072c03bc58a2f0e
- SSDEEP 98304:uKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jR4TUxIywLZ1opDbSVHrj:uquFIF0wuPlCKrjRvMLZ7pj
- TLSH T114869E1273D44075F5B31631993592256A7ABCA58F32CA9F33882D5E7FB16808E3A733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-03_2cd8005d751a5ff68155292fc9b1ade4_agent-tesla_amadey_cobalt-strike_coinminer_darkgate_glas.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-03_2cd8005d751a5ff68155292fc9b1ade4_agent-tesla_amadey_cobalt-strike_coinminer_darkgate_glas.exe
Resource
win11ltsc2024-20260629-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_2cd8005d751a5ff68155292fc9b1ade4_agent-tesla_amadey_cobalt-strike_coinminer_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_rugmi_satacom_smoke-loader_stealc
- Size 7.6MB
- SHA256 abb985f8b224cb1eb3982654c3616e3e0065c94cf6803eee6c96b18b34ae65c0
- MD5 2cd8005d751a5ff68155292fc9b1ade4
- SHA1 cea66deca776810d3211402c62296d43cb42495e
- SHA512 69faea1cc12b719241222b30de73e3e84a269da7cec7d8fb830a225e1031b2e99ad3958f188535257a587ef0d20860abf1fd567735625ab28072c03bc58a2f0e
- SSDEEP 98304:uKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jR4TUxIywLZ1opDbSVHrj:uquFIF0wuPlCKrjRvMLZ7pj
- TLSH T114869E1273D44075F5B31631993592256A7ABCA58F32CA9F33882D5E7FB16808E3A733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables manipulated with Fody
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
AutoIT Executable
AutoIT scripts compiled to PE executables.