General
- Target 2026-07-17_85d821a0d1af82b54a0d794445da3cd7_agent-tesla_elex_hawkeye_maze_netwire_remcos_xloader
- Size 1.4MB
- Sample260717-12m9bsa191
- SHA256 49acaa9c2d946c24a5a7273561cdc32f68392c1cf010301d4df51a44713454b6
- MD5 85d821a0d1af82b54a0d794445da3cd7
- SHA1 a49520dbfab0739410b1a0eda9740ef9089fb76b
- SHA512 bdab0780a27da8eab71709a0de867f609d1f3deb7319ab39816ec7677cdd204b426092abee5739dea97268169adff8d2d7e1adbfadc2c94a22960c5853eda7d3
- SSDEEP 24576:du6J3xO0c+JY5UZ+XCHkGsoEAdx20W4njUprvVcC1f2o5RRfgM:vo0c++OCokGs7Adgrd1f26RX
- TLSH T14F65BE52F38EC2F0DE165172BA79F73A1E3B3C254530B9566FC5ED3AAD21021112DAA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-17_85d821a0d1af82b54a0d794445da3cd7_agent-tesla_elex_hawkeye_maze_netwire_remcos_xloader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_85d821a0d1af82b54a0d794445da3cd7_agent-tesla_elex_hawkeye_maze_netwire_remcos_xloader
- Size 1.4MB
- SHA256 49acaa9c2d946c24a5a7273561cdc32f68392c1cf010301d4df51a44713454b6
- MD5 85d821a0d1af82b54a0d794445da3cd7
- SHA1 a49520dbfab0739410b1a0eda9740ef9089fb76b
- SHA512 bdab0780a27da8eab71709a0de867f609d1f3deb7319ab39816ec7677cdd204b426092abee5739dea97268169adff8d2d7e1adbfadc2c94a22960c5853eda7d3
- SSDEEP 24576:du6J3xO0c+JY5UZ+XCHkGsoEAdx20W4njUprvVcC1f2o5RRfgM:vo0c++OCokGs7Adgrd1f26RX
- TLSH T14F65BE52F38EC2F0DE165172BA79F73A1E3B3C254530B9566FC5ED3AAD21021112DAA3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
NetWire RAT payload
-
AutoIT Executable
AutoIT scripts compiled to PE executables.