General
- Target 2026-08-01_68fe001848b7459bb04b905d64a30dcf_agent-tesla_amadey_avoslocker_cobalt-strike_darkgate_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_lynx_njrat_play_redline-stealer_remcos_rhadamanthys_smoke-loader_stop
- Size 27.3MB
- Sample260802-awj2lszzbw
- SHA256 0102b9c82b508b11f0276ec5c70ed2c92804d63dce358686f4aa65217db6934d
- MD5 68fe001848b7459bb04b905d64a30dcf
- SHA1 33ec91312969729a4140b858fae86b3f0324f1d4
- SHA512 d465077612e8c772889663e7052475f66e503a9d45ce5fcccaa3c80c90e9cd648526bb3f5817d56b311c624276509c4aa1cf3fa9338709394a5152962b662f2c
- SSDEEP 196608:61yxmgquFIF0wuPlCKrjRh1yxmgquFIF0wuPlCKrjRh1yxmgquFIF0wuPlCKrjRp:syxuoUmFyxuoUmFyxuoUmFyx2
- TLSH T197577C1277D85535F1B71631997892645A3BBCA19F32CACF33882D5E6B70AC08A36733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-01_68fe001848b7459bb04b905d64a30dcf_agent-tesla_amadey_avoslocker_cobalt-strike_darkgate_ele.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_68fe001848b7459bb04b905d64a30dcf_agent-tesla_amadey_avoslocker_cobalt-strike_darkgate_ele.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_68fe001848b7459bb04b905d64a30dcf_agent-tesla_amadey_avoslocker_cobalt-strike_darkgate_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_lynx_njrat_play_redline-stealer_remcos_rhadamanthys_smoke-loader_stop
- Size 27.3MB
- SHA256 0102b9c82b508b11f0276ec5c70ed2c92804d63dce358686f4aa65217db6934d
- MD5 68fe001848b7459bb04b905d64a30dcf
- SHA1 33ec91312969729a4140b858fae86b3f0324f1d4
- SHA512 d465077612e8c772889663e7052475f66e503a9d45ce5fcccaa3c80c90e9cd648526bb3f5817d56b311c624276509c4aa1cf3fa9338709394a5152962b662f2c
- SSDEEP 196608:61yxmgquFIF0wuPlCKrjRh1yxmgquFIF0wuPlCKrjRh1yxmgquFIF0wuPlCKrjRp:syxuoUmFyxuoUmFyxuoUmFyx2
- TLSH T197577C1277D85535F1B71631997892645A3BBCA19F32CACF33882D5E6B70AC08A36733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE