General
- Target 2026-08-02_88d048f5b215e39d44d0bfc6e65b2390_agent-tesla_amadey_elex_hawkeye_maze_remcos
- Size 1.4MB
- Sample260802-ree5rs1se1
- SHA256 0994ea1bfeb10e9ad6d1195bd935d5894924a71301c8570c99ab5515c5e76afa
- MD5 88d048f5b215e39d44d0bfc6e65b2390
- SHA1 1767c0e29988db92020bfb5bc8c00c41196a3fc3
- SHA512 3cd6622de598dd6c12db8cf99b508ffc19cdb69f710d9726008e4aa77cb074825e1c88f613432781904024cbc564993d55cd8626fa48b8fe8dec6f98390a2aba
- SSDEEP 24576:6T3EV3Myyzl0hMf1tr7Caw8M0n/TwSfVcYG3K/cJHlnFR+IGNe8j3Iz:Y3EVpBh211Waw30nLNiXicJFFRGNzj3
- TLSH T10B65CF1373D18062FFABA1739B5EF31646BC6D290323A52F139C2E79B970171562E632
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_88d048f5b215e39d44d0bfc6e65b2390_agent-tesla_amadey_elex_hawkeye_maze_remcos.exe
Resource
win10v2004-20260513-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_88d048f5b215e39d44d0bfc6e65b2390_agent-tesla_amadey_elex_hawkeye_maze_remcos.exe
Resource
win11ltsc2024-20260709-en
19 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_88d048f5b215e39d44d0bfc6e65b2390_agent-tesla_amadey_elex_hawkeye_maze_remcos
- Size 1.4MB
- SHA256 0994ea1bfeb10e9ad6d1195bd935d5894924a71301c8570c99ab5515c5e76afa
- MD5 88d048f5b215e39d44d0bfc6e65b2390
- SHA1 1767c0e29988db92020bfb5bc8c00c41196a3fc3
- SHA512 3cd6622de598dd6c12db8cf99b508ffc19cdb69f710d9726008e4aa77cb074825e1c88f613432781904024cbc564993d55cd8626fa48b8fe8dec6f98390a2aba
- SSDEEP 24576:6T3EV3Myyzl0hMf1tr7Caw8M0n/TwSfVcYG3K/cJHlnFR+IGNe8j3Iz:Y3EVpBh211Waw30nLNiXicJFFRGNzj3
- TLSH T10B65CF1373D18062FFABA1739B5EF31646BC6D290323A52F139C2E79B970171562E632
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1