General
- Target 2026-07-15_aae09f868fe1ae9693b8a2deae07742a_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_rugmi_satacom_smoke-loader_stealc_vidar
- Size 8.9MB
- Sample260715-e266jsbw6q
- SHA256 b366e33ea92da7c16779ba2a32dcb6158c96b6725a491eb5b1f6ee001b279f10
- MD5 aae09f868fe1ae9693b8a2deae07742a
- SHA1 e44bd6ca81c284967a37dcbdb64999f42414a1ba
- SHA512 d8370b17d2aa88c8c5d59a58ad71f3fff568b4b3d36a5ce54fb1143c4aba1311d8f5507c6e51e8d8b569d009c57995fce2b111d69afe4999a0a07b88b1aee944
- SSDEEP 98304:uKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jR4TUvye0B15n6LZ1opDbSVC:uquFIF0wuPlCKrjRY16LZ7pjmyOb
- TLSH T1BC96AF1272D85875F1B312319A3592A55A3DBC644B22C98F33C83E5E7F716C1AA3A733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-15_aae09f868fe1ae9693b8a2deae07742a_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_aae09f868fe1ae9693b8a2deae07742a_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_aae09f868fe1ae9693b8a2deae07742a_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_rugmi_satacom_smoke-loader_stealc_vidar
- Size 8.9MB
- SHA256 b366e33ea92da7c16779ba2a32dcb6158c96b6725a491eb5b1f6ee001b279f10
- MD5 aae09f868fe1ae9693b8a2deae07742a
- SHA1 e44bd6ca81c284967a37dcbdb64999f42414a1ba
- SHA512 d8370b17d2aa88c8c5d59a58ad71f3fff568b4b3d36a5ce54fb1143c4aba1311d8f5507c6e51e8d8b569d009c57995fce2b111d69afe4999a0a07b88b1aee944
- SSDEEP 98304:uKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jR4TUvye0B15n6LZ1opDbSVC:uquFIF0wuPlCKrjRY16LZ7pjmyOb
- TLSH T1BC96AF1272D85875F1B312319A3592A55A3DBC644B22C98F33C83E5E7F716C1AA3A733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables manipulated with Fody
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
AutoIT Executable
AutoIT scripts compiled to PE executables.