2026-07-12_8697fd7ae9c90df38b1930bc3615f466_agent-tesla_amadey_darkgate_hawkeye_icedid_njrat_remcos_vidar

General

Target
2026-07-12_8697fd7ae9c90df38b1930bc3615f466_agent-tesla_amadey_darkgate_hawkeye_icedid_njrat_remcos_vidar
Size 1.5MB
Sample260712-t7arvsdv4l
SHA256 14c64d8d4959cf17411d61fd88efb9544d0978a7e7878b631a3871cb4485dd41
MD5 8697fd7ae9c90df38b1930bc3615f466
SHA1 d00c9894bd136868196bad1951b1b1c293859106
SHA512 b145940c5762c9897dea6d2e91d5829e1c2ca4c22100bc8f3812767de739e14f9cabd158fdffeac7d6da7ca39cc07984f7cf4a69c9a4d7261b331b6fe6cc8647
SSDEEP 24576:DLTiw2lAHnh+eWsN3skA4RV1Hom2KXMmHahvtHWWd5CslZOZv:biw2Uh+ZkldoPK8YahFHRBK
TLSH
T143759E0273E88475FEB792328A65A201D7BA7C510733C69F13940A7D6E736E16E3D722
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-12_8697fd7ae9c90df38b1930bc3615f466_agent-tesla_amadey_darkgate_hawkeye_icedid_njrat_remcos_vidar

File Explorer

2026-07-12_8697fd7ae9c90df38b1930bc3615f466_agent-tesla_amadey_darkgate_hawkeye_icedid_njrat_remcos_vidar

.exe 1.5MB

2026-07-12_8697fd7ae9c90df38b1930bc3615f466_agent-tesla_amadey_darkgate_hawkeye_icedid_njrat_remcos_vidar

IMPHASH 132e825e554e7b8d464d7812f8fb426a
SHA256 14c64d8d4959cf17411d61fd88efb9544d0978a7e7878b631a3871cb4485dd41
MD5 8697fd7ae9c90df38b1930bc3615f466
SHA1 d00c9894bd136868196bad1951b1b1c293859106
SHA512 b145940c5762c9897dea6d2e91d5829e1c2ca4c22100bc8f3812767de739e14f9cabd158fdffeac7d6da7ca39cc07984f7cf4a69c9a4d7261b331b6fe6cc8647
SSDEEP 24576:DLTiw2lAHnh+eWsN3skA4RV1Hom2KXMmHahvtHWWd5CslZOZv:biw2Uh+ZkldoPK8YahFHRBK
TLSH
T143759E0273E88475FEB792328A65A201D7BA7C510733C69F13940A7D6E736E16E3D722
MD5 SHA1 SHA512 SSDEEP TLSH

AutoIT Executable

AutoIT scripts compiled to PE executables.
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

14024

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\Vinay\Projects\simple_launcher\dist\t64.pdb

kernel32

ExitProcess GetCommandLineW SearchPathW SetInformationJobObject CreateProcessW GetCurrentProcess WaitForSingleObject GenerateConsoleCtrlEvent AssignProcessToJobObject FormatMessageW GetExitCodeProcess GetModuleFileNameW QueryInformationJobObject MultiByteToWideChar CreateJobObjectA GetStdHandle GetLastError SetConsoleCtrlHandler DuplicateHandle CloseHandle HeapSize GetProcessHeap SetEndOfFile SetEnvironmentVariableW HeapFree HeapAlloc EnterCriticalSection LeaveCriticalSection GetStringTypeW GetCommandLineA TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext RtlUnwindEx InitializeCriticalSectionAndSpinCount EncodePointer DecodePointer HeapSetInformation GetVersion HeapCreate GetCPInfo GetACP GetOEMCP IsValidCodePage FlsGetValue FlsSetValue FlsFree SetLastError GetCurrentThreadId FlsAlloc GetProcAddress GetModuleHandleW WriteFile SetHandleCount GetFileType GetStartupInfoW DeleteCriticalSection Sleep LCMapStringW ReadFile SetFilePointer FreeEnvironmentStringsW GetEnvironmentStringsW GetModuleFileNameA WideCharToMultiByte QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime CreateFileW LoadLibraryW HeapReAlloc GetConsoleCP GetConsoleMode FlushFileBuffers SetStdHandle CompareStringW WriteConsoleW

shlwapi

StrStrIW PathRemoveFileSpecW PathCombineW

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-12_8697fd7ae9c90df38b1930bc3615f466_agent-tesla_amadey_darkgate_hawkeye_icedid_njrat_remcos_vidar

kernel32

shlwapi

generic