General
- Target 2026-07-03_c2afebd4dcb23d03486c1bf1df2c44a7_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_satacom_smoke-loader_stealc_stop_vidar
- Size 57.3MB
- Sample260703-kl32vaay5j
- SHA256 b6595de05319d914579a964a49245448f805be3762bc41063bca50103ffd1656
- MD5 c2afebd4dcb23d03486c1bf1df2c44a7
- SHA1 94f07366afb11c4bb21e7ce61324a278f41f7005
- SHA512 2e882bbdffd360f97ff08bdb53f29e05a737e712bbf4556002806d05f1104ccf0caa3224b734c27a95d4667e4135deca90eccb64233127351a5d0b1db5710230
- SSDEEP 393216:poUmmoUmmoUmmoUmooUmmoUmmoUmmoUm:
- TLSH T18BD79E0273D85475F5B316318A3592595A3ABCA58F32CA8F33882D5E6FB16C09E39733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
2026-07-03_c2afebd4dcb23d03486c1bf1df2c44a7_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-03_c2afebd4dcb23d03486c1bf1df2c44a7_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win11ltsc2024-20260630-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_c2afebd4dcb23d03486c1bf1df2c44a7_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_satacom_smoke-loader_stealc_stop_vidar
- Size 57.3MB
- SHA256 b6595de05319d914579a964a49245448f805be3762bc41063bca50103ffd1656
- MD5 c2afebd4dcb23d03486c1bf1df2c44a7
- SHA1 94f07366afb11c4bb21e7ce61324a278f41f7005
- SHA512 2e882bbdffd360f97ff08bdb53f29e05a737e712bbf4556002806d05f1104ccf0caa3224b734c27a95d4667e4135deca90eccb64233127351a5d0b1db5710230
- SSDEEP 393216:poUmmoUmmoUmmoUmooUmmoUmmoUmmoUm:
- TLSH T18BD79E0273D85475F5B316318A3592595A3ABCA58F32CA8F33882D5E6FB16C09E39733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.