29be5e53f435e3ec61f8e9fc256b17d5de18a3512ec14c3d2fa65b81403602db | Triage™

Login
Reports

Overview

overview

8

Static

static

5

2026-08-01...os.exe

windows10-2004-x64

2026-08-01...os.exe

windows11-ltsc_2024-x64

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-01_31c060adb4b528ced41b0bd0e757cdc6_agent-tesla_amadey_darkgate_elex_hawkeye_maze_remcos
Size 82.7MB
Sample260801-1nfx4axfqa
SHA256 29be5e53f435e3ec61f8e9fc256b17d5de18a3512ec14c3d2fa65b81403602db
MD5 31c060adb4b528ced41b0bd0e757cdc6
SHA1 7732d2b2f9b3532ef0356630067dee1cd64c9387
SHA512 18bd762c915ec664479b2e832a7dbcf72b96d962a413e55018d46464d51f042e7d8667f2d5e79287505069de23d03c52dcb546e46a6866186d21913ad93b9de8
SSDEEP 1572864:vxgSggTDVRcUXtmIQkrntKqKo8+DXGv1H8AT1rvvADP:vxnHvrcUXATvJo8829H8A5rvvAD
TLSH
T1DD183383A7E1E011FD5253B14F51E936A2793C394233C89E77E4AD6BB8391312B5C7A2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

adware defense_evasion discovery execution persistence privilege_escalation spyware

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

2026-08-01_31c060adb4b528ced41b0bd0e757cdc6_agent-tesla_amadey_darkgate_elex_hawkeye_maze_remcos.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

19 signatures

150 seconds

adware defense_evasion discovery execution persistence privilege_escalation spyware

Behavioral task

behavioral2

Sample

2026-08-01_31c060adb4b528ced41b0bd0e757cdc6_agent-tesla_amadey_darkgate_elex_hawkeye_maze_remcos.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

18 signatures

150 seconds

adware defense_evasion discovery execution persistence privilege_escalation spyware

Malware Config

Targets

- Target
  2026-08-01_31c060adb4b528ced41b0bd0e757cdc6_agent-tesla_amadey_darkgate_elex_hawkeye_maze_remcos
- Size 82.7MB
- SHA256 29be5e53f435e3ec61f8e9fc256b17d5de18a3512ec14c3d2fa65b81403602db
- MD5 31c060adb4b528ced41b0bd0e757cdc6
- SHA1 7732d2b2f9b3532ef0356630067dee1cd64c9387
- SHA512 18bd762c915ec664479b2e832a7dbcf72b96d962a413e55018d46464d51f042e7d8667f2d5e79287505069de23d03c52dcb546e46a6866186d21913ad93b9de8
- SSDEEP 1572864:vxgSggTDVRcUXtmIQkrntKqKo8+DXGv1H8AT1rvvADP:vxnHvrcUXATvJo8829H8A5rvvAD
- TLSH
  T1DD183383A7E1E011FD5253B14F51E936A2793C394233C89E77E4AD6BB8391312B5C7A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware defense_evasion discovery execution persistence privilege_escalation spyware
- Modifies Windows Firewall
  defense_evasion
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwaredefense_evasiondiscoveryexecutionpersistenceprivilege_escalationspyware

behavioral2

adwaredefense_evasiondiscoveryexecutionpersistenceprivilege_escalationspyware

© 2018-2026

Terms | Privacy