General
- Target 2026-07-29_1c1fc8afb4c15e8af1119332a26d3d7e_agent-tesla_darkgate_elex_hawkeye_maze_remcos
- Size 8.2MB
- Sample260730-cf99zaxcnb
- SHA256 a260c6afa53139d305cbb42cd4d8a6a50ce5620f5083355998bc82b42da24421
- MD5 1c1fc8afb4c15e8af1119332a26d3d7e
- SHA1 1df9ba65353142f9f73d46931172feda711ea2da
- SHA512 15c73ccfdeae980d75b683d401914940e78be711b0a88eec6b6bbb41486f02604b1fcbdf4c4967e18e1d58f569e61d75f0c363af4bee4e1c84466b7fa7878a89
- SSDEEP 196608:ij1vp2DGSnMd7GLaPs6MRflGbYSgyptLv49iia:i2jKmaPXMBwTvtF
- TLSH T19686232267EDC364CB765233BE7AB7007FBB78764624B86B1F841D3DA910161172C6A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-29_1c1fc8afb4c15e8af1119332a26d3d7e_agent-tesla_darkgate_elex_hawkeye_maze_remcos.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_1c1fc8afb4c15e8af1119332a26d3d7e_agent-tesla_darkgate_elex_hawkeye_maze_remcos.exe
Resource
win11ltsc2024-20260710-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_1c1fc8afb4c15e8af1119332a26d3d7e_agent-tesla_darkgate_elex_hawkeye_maze_remcos
- Size 8.2MB
- SHA256 a260c6afa53139d305cbb42cd4d8a6a50ce5620f5083355998bc82b42da24421
- MD5 1c1fc8afb4c15e8af1119332a26d3d7e
- SHA1 1df9ba65353142f9f73d46931172feda711ea2da
- SHA512 15c73ccfdeae980d75b683d401914940e78be711b0a88eec6b6bbb41486f02604b1fcbdf4c4967e18e1d58f569e61d75f0c363af4bee4e1c84466b7fa7878a89
- SSDEEP 196608:ij1vp2DGSnMd7GLaPs6MRflGbYSgyptLv49iia:i2jKmaPXMBwTvtF
- TLSH T19686232267EDC364CB765233BE7AB7007FBB78764624B86B1F841D3DA910161172C6A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Executes a VBScript file via the Windows Script Host.