General
- Target 2026-07-11_65c14d6bd7aed3dc3f093aeaa4d9c0f6_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_satacom_smoke-loader_stealc
- Size 35.3MB
- Sample260711-gp8vqaey3s
- SHA256 271768b8bdcf24c17f4b80f931b47da7eb9e4026558d37d22ced7aa41c72a208
- MD5 65c14d6bd7aed3dc3f093aeaa4d9c0f6
- SHA1 1f26a7fa829be985f63b4906c046d1fa7cca1c2f
- SHA512 bf7fa126474491fa72ed12480634aecafe42145fc77479d714b733a7e48e101fe620b9dc63b4b50188c6e6f5cf27059ca088a381e09b6be5dc54e16a9fa214c5
- SSDEEP 393216:PoUmzhtu5tnxmahiTTWe5unX3Csc4cKf7lNEMhr+nC0ztt4z10zn4kFVFqq+sKV2:ihE5FxdhifnESif7hjq2zjkQqj9Zf4MX
- TLSH T12C87121272D84075F5B316319A3992646A3DBCA48F32C99F328C3D9D6FB16819E36733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-11_65c14d6bd7aed3dc3f093aeaa4d9c0f6_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-11_65c14d6bd7aed3dc3f093aeaa4d9c0f6_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win11ltsc2024-20260710-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_65c14d6bd7aed3dc3f093aeaa4d9c0f6_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_satacom_smoke-loader_stealc
- Size 35.3MB
- SHA256 271768b8bdcf24c17f4b80f931b47da7eb9e4026558d37d22ced7aa41c72a208
- MD5 65c14d6bd7aed3dc3f093aeaa4d9c0f6
- SHA1 1f26a7fa829be985f63b4906c046d1fa7cca1c2f
- SHA512 bf7fa126474491fa72ed12480634aecafe42145fc77479d714b733a7e48e101fe620b9dc63b4b50188c6e6f5cf27059ca088a381e09b6be5dc54e16a9fa214c5
- SSDEEP 393216:PoUmzhtu5tnxmahiTTWe5unX3Csc4cKf7lNEMhr+nC0ztt4z10zn4kFVFqq+sKV2:ihE5FxdhifnESif7hjq2zjkQqj9Zf4MX
- TLSH T12C87121272D84075F5B316319A3992646A3DBCA48F32C99F328C3D9D6FB16819E36733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables manipulated with Fody
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
AutoIT Executable
AutoIT scripts compiled to PE executables.