General
- Target 2026-07-06_54f7bc1c248be28a4197324c600d7e41_agent-tesla_amadey_avoslocker_cobalt-strike_darkgate_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_lynx_njrat_play_redline-stealer_remcos_rhadamanthys_smoke-loader_stop
- Size 27.4MB
- Sample260707-ebe95shs4w
- SHA256 b3557f64153be1dae20f14a18197e62636d280ac8c39ad22ae74fae30d782260
- MD5 54f7bc1c248be28a4197324c600d7e41
- SHA1 12d47764f1d4c6d6985c59675c93500d3337bf7f
- SHA512 88e0b83763dfa29c3a6b32c85e7460cee57ac15aab94d2ad22e4b93ec32305f3fc7c6be7807581bcc4f7da87cf7de38d2092edda1877374eaade0785e41918e1
- SSDEEP 196608:61yxmgquFIF0wuPlCKrjRh1yxmgquFIF0wuPlCKrjRh1yxmgquFIF0wuPlCKrjRs:syxuoUmFyxuoUmFyxuoUmFyxn
- TLSH T1D6577C1277D85535F1B71631997892645A3BBCA19F32CACF33882D5E6B70AC08A36733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-06_54f7bc1c248be28a4197324c600d7e41_agent-tesla_amadey_avoslocker_cobalt-strike_darkgate_ele.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_54f7bc1c248be28a4197324c600d7e41_agent-tesla_amadey_avoslocker_cobalt-strike_darkgate_ele.exe
Resource
win11ltsc2024-20260706-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_54f7bc1c248be28a4197324c600d7e41_agent-tesla_amadey_avoslocker_cobalt-strike_darkgate_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_lynx_njrat_play_redline-stealer_remcos_rhadamanthys_smoke-loader_stop
- Size 27.4MB
- SHA256 b3557f64153be1dae20f14a18197e62636d280ac8c39ad22ae74fae30d782260
- MD5 54f7bc1c248be28a4197324c600d7e41
- SHA1 12d47764f1d4c6d6985c59675c93500d3337bf7f
- SHA512 88e0b83763dfa29c3a6b32c85e7460cee57ac15aab94d2ad22e4b93ec32305f3fc7c6be7807581bcc4f7da87cf7de38d2092edda1877374eaade0785e41918e1
- SSDEEP 196608:61yxmgquFIF0wuPlCKrjRh1yxmgquFIF0wuPlCKrjRh1yxmgquFIF0wuPlCKrjRs:syxuoUmFyxuoUmFyxuoUmFyxn
- TLSH T1D6577C1277D85535F1B71631997892645A3BBCA19F32CACF33882D5E6B70AC08A36733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE