f6bfac509c2f5fbd04dca4d2bd02ca10dbf072944768d361493d0e590c187eeb

General

Target
2026-07-03_5214a1387bc4e81e92c255bfc2b6f2ed_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_satacom_smoke-loader_stop_vidar
Size 8.1MB
Sample260703-jp3d2sdv2t
SHA256 f6bfac509c2f5fbd04dca4d2bd02ca10dbf072944768d361493d0e590c187eeb
MD5 5214a1387bc4e81e92c255bfc2b6f2ed
SHA1 03a87c13089dccbe146a94774d84527430cf8440
SHA512 71068398226ae2558ba7c74b88502135663bbb6ae1f9f86bbdab60c1eae7d2f23445dc03fc78629a8216a6e9ea2f74ef0d95f37b1f3e68e3bc2c765619adba4a
SSDEEP 98304:eKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jR4TU+ETSERbsYvwOhv:equFIF0wuPlCKrjRQENvwOR
TLSH
T12386AE0277D85475F1B312318A3592A55A3DBC654E32CA8F33883E6E6F716C1AA39733
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  2026-07-03_5214a1387bc4e81e92c255bfc2b6f2ed_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_satacom_smoke-loader_stop_vidar
- Size 8.1MB
- SHA256 f6bfac509c2f5fbd04dca4d2bd02ca10dbf072944768d361493d0e590c187eeb
- MD5 5214a1387bc4e81e92c255bfc2b6f2ed
- SHA1 03a87c13089dccbe146a94774d84527430cf8440
- SHA512 71068398226ae2558ba7c74b88502135663bbb6ae1f9f86bbdab60c1eae7d2f23445dc03fc78629a8216a6e9ea2f74ef0d95f37b1f3e68e3bc2c765619adba4a
- SSDEEP 98304:eKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jR4TU+ETSERbsYvwOhv:equFIF0wuPlCKrjRQENvwOR
- TLSH
  T12386AE0277D85475F1B312318A3592A55A3DBC654E32CA8F33883E6E6F716C1AA39733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

9^/10

ransomware spyware stealer adware persistence
- Detects executables manipulated with Fody
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- AutoIT Executable
  AutoIT scripts compiled to PE executables.
behavioral1 behavioral2