General
- Target 2026-07-03_494f9efb1abffea64788fe01ed520acf_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_satacom_smoke-loader_stealc_stop_vidar
- Size 34.2MB
- Sample260704-a116pad18k
- SHA256 0b9d813a75ff4eb1bbc6f23c44c85ec7872dd549790fb2630a367375e76e50d6
- MD5 494f9efb1abffea64788fe01ed520acf
- SHA1 6a319c233af6ab82300a1b115d56a09cecdc489f
- SHA512 66d9fa1d3402cae615a8de8768f136d8f4fbf31990fcb91e1915f4e850ce4b6790a620086c4a3b6152f9fefc0e77b0aed2dc96b77eae0eff25a0a14be9e41f08
- SSDEEP 196608:uquFIF0wuPlCKrjRvaZWNOoquFIF0wuPlCKrjRvaZWNOaquFIF0wuPlCKrjRvaZT:PoUm1JQoUm1JmoUm1JQoUm1J
- TLSH T1CC779F0273DC68B5F1B316318A3592A55A39FC654A32C98F33883E5D6F71681BA39733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-03_494f9efb1abffea64788fe01ed520acf_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-03_494f9efb1abffea64788fe01ed520acf_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win11ltsc2024-20260629-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_494f9efb1abffea64788fe01ed520acf_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_satacom_smoke-loader_stealc_stop_vidar
- Size 34.2MB
- SHA256 0b9d813a75ff4eb1bbc6f23c44c85ec7872dd549790fb2630a367375e76e50d6
- MD5 494f9efb1abffea64788fe01ed520acf
- SHA1 6a319c233af6ab82300a1b115d56a09cecdc489f
- SHA512 66d9fa1d3402cae615a8de8768f136d8f4fbf31990fcb91e1915f4e850ce4b6790a620086c4a3b6152f9fefc0e77b0aed2dc96b77eae0eff25a0a14be9e41f08
- SSDEEP 196608:uquFIF0wuPlCKrjRvaZWNOoquFIF0wuPlCKrjRvaZWNOaquFIF0wuPlCKrjRvaZT:PoUm1JQoUm1JmoUm1JQoUm1J
- TLSH T1CC779F0273DC68B5F1B316318A3592A55A39FC654A32C98F33883E5D6F71681BA39733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables manipulated with Fody
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
AutoIT Executable
AutoIT scripts compiled to PE executables.