General
- Target 2026-07-04_b1ba6423c1bc62f8635e13cc48ada29f_agent-tesla_amadey_darkgate_elex_hawkeye_maze_remcos
- Size 923KB
- Sample260704-c6f4taav3s
- SHA256 895eef1c8d5212f809e9c77f043f77c4e7adc9caec2453a5aa9e7b32cffa4f13
- MD5 b1ba6423c1bc62f8635e13cc48ada29f
- SHA1 2466f928666bb33af2f3733ae19bd56f1dac7dc8
- SHA512 fddd25e1637569cd59cbfcb1a992ae0f654d78b769e3a683ce62bffc80eb21284ff4f7c0037272650b016a7e98ca8502fef936c46765a0d53781628ad104cb71
- SSDEEP 24576:TAHnh+eWsN3skA4RV1Hom2KXMmHa4gwD+Qo5:eh+ZkldoPK8Ya4k
- TLSH T101159C0273D1C036FFABA2739B6AF20556BC79254133852F13981DB9BD701B2267E663
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-04_b1ba6423c1bc62f8635e13cc48ada29f_agent-tesla_amadey_darkgate_elex_hawkeye_maze_remcos.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-04_b1ba6423c1bc62f8635e13cc48ada29f_agent-tesla_amadey_darkgate_elex_hawkeye_maze_remcos.exe
Resource
win11ltsc2024-20260629-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-04_b1ba6423c1bc62f8635e13cc48ada29f_agent-tesla_amadey_darkgate_elex_hawkeye_maze_remcos
- Size 923KB
- SHA256 895eef1c8d5212f809e9c77f043f77c4e7adc9caec2453a5aa9e7b32cffa4f13
- MD5 b1ba6423c1bc62f8635e13cc48ada29f
- SHA1 2466f928666bb33af2f3733ae19bd56f1dac7dc8
- SHA512 fddd25e1637569cd59cbfcb1a992ae0f654d78b769e3a683ce62bffc80eb21284ff4f7c0037272650b016a7e98ca8502fef936c46765a0d53781628ad104cb71
- SSDEEP 24576:TAHnh+eWsN3skA4RV1Hom2KXMmHa4gwD+Qo5:eh+ZkldoPK8Ya4k
- TLSH T101159C0273D1C036FFABA2739B6AF20556BC79254133852F13981DB9BD701B2267E663
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.