General
- Target 2026-08-02_f5190acf863658b43196b438af6d1451_agent-tesla_darkgate_elex_hawkeye_maze_remcos
- Size 8.2MB
- Sample260802-ctrd1s1ybw
- SHA256 080012a98e6cc5f03f4a9ab2a2fa630cc592e12bfb84f9437fa257a3b6e2f980
- MD5 f5190acf863658b43196b438af6d1451
- SHA1 2c97d0555178bcbacd9afb51430ee6ecf83d344a
- SHA512 d2566e3495874b7326f89f00bed6bf0f8334acd922c774d8560cf4a5a44505810e279970080ed1655140257423f6f05dc75238ac68b17446960e6f42ac3c42b2
- SSDEEP 196608:wjCpHeghA+p9xRuFjiWt+WifjnBeKSM0HMJCn6SlJz8z3esbLH2:weH9RWt4IMbsHXz0BW
- TLSH T139862322B7DE8371CB269133BF29B7452EBB38651630F81B2F980D7DA910161563D7A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-02_f5190acf863658b43196b438af6d1451_agent-tesla_darkgate_elex_hawkeye_maze_remcos.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_f5190acf863658b43196b438af6d1451_agent-tesla_darkgate_elex_hawkeye_maze_remcos.exe
Resource
win11ltsc2024-20260710-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_f5190acf863658b43196b438af6d1451_agent-tesla_darkgate_elex_hawkeye_maze_remcos
- Size 8.2MB
- SHA256 080012a98e6cc5f03f4a9ab2a2fa630cc592e12bfb84f9437fa257a3b6e2f980
- MD5 f5190acf863658b43196b438af6d1451
- SHA1 2c97d0555178bcbacd9afb51430ee6ecf83d344a
- SHA512 d2566e3495874b7326f89f00bed6bf0f8334acd922c774d8560cf4a5a44505810e279970080ed1655140257423f6f05dc75238ac68b17446960e6f42ac3c42b2
- SSDEEP 196608:wjCpHeghA+p9xRuFjiWt+WifjnBeKSM0HMJCn6SlJz8z3esbLH2:weH9RWt4IMbsHXz0BW
- TLSH T139862322B7DE8371CB269133BF29B7452EBB38651630F81B2F980D7DA910161563D7A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Executes a VBScript file via the Windows Script Host.