General
- Target 2026-07-06_f9af10c7bef5090670a4ad9571d3cf39_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_rugmi_satacom_smoke-loader_stealc_stop_tofsee
- Size 9.3MB
- Sample260706-x4b3asgs2l
- SHA256 570cef1395d548f8964ebfbade6d8e501bf95d5cca138ff7edf45e25070917e0
- MD5 f9af10c7bef5090670a4ad9571d3cf39
- SHA1 34a8e6abe9bfead9995ec53b80370abb00f748f1
- SHA512 19fc88ff31e98f923e09b216b09ebedf562249d5a283eae88a4b303a083330fd76d6b78ab215fce14d3929e1461cb1f97f2a5b8fd2e53c1a9c06b2dbc002a2d7
- SSDEEP 98304:QKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jR4TULsIyTdUKsW1+M5NbLZo:QquFIF0wuPlCKrjRuS1ybLZ7pjK
- TLSH T11EA69D1273D85535F1B316319A7892645A7ABC655F32CACF33882E5E2F70AC09A36733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-06_f9af10c7bef5090670a4ad9571d3cf39_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_f9af10c7bef5090670a4ad9571d3cf39_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win11ltsc2024-20260706-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_f9af10c7bef5090670a4ad9571d3cf39_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_rugmi_satacom_smoke-loader_stealc_stop_tofsee
- Size 9.3MB
- SHA256 570cef1395d548f8964ebfbade6d8e501bf95d5cca138ff7edf45e25070917e0
- MD5 f9af10c7bef5090670a4ad9571d3cf39
- SHA1 34a8e6abe9bfead9995ec53b80370abb00f748f1
- SHA512 19fc88ff31e98f923e09b216b09ebedf562249d5a283eae88a4b303a083330fd76d6b78ab215fce14d3929e1461cb1f97f2a5b8fd2e53c1a9c06b2dbc002a2d7
- SSDEEP 98304:QKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jR4TULsIyTdUKsW1+M5NbLZo:QquFIF0wuPlCKrjRuS1ybLZ7pjK
- TLSH T11EA69D1273D85535F1B316319A7892645A7ABC655F32CACF33882E5E2F70AC09A36733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables manipulated with Fody
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
AutoIT Executable
AutoIT scripts compiled to PE executables.