General
- Target 2026-08-06_617f81ad23cb610b38b9567e03cf5ee1_agent-tesla_amadey_elex_glassworm_icedid_karagany_mafia_njrat_ransomhub_remcos_rhadamanthys_smoke-loader_stealc
- Size 22.3MB
- Sample260806-hm8ydagd22
- SHA256 8e9f8a7e683a0eaf4e60aaf0be27316933856b4f3f44f0099c46359eb4739f30
- MD5 617f81ad23cb610b38b9567e03cf5ee1
- SHA1 1e4a3d68cd9d2736fcb09720ebfdff8555d225b4
- SHA512 0c11b3039c015f3d20f9b3a0832a29134b82f2b227d73a002c9867efbbc4c8bced48e76ec0f7a7dab775cb7abd7eb35d60f86d789c351eec9d56487441cc50f0
- SSDEEP 393216:PQO0rl/RRSgIurgjyGgN2yP5l/RRwLg5O0AjGgNsFuK:PQOel/RRMX0t5l/RRlOTpG
- TLSH T1F0376C92BF62D824DA7501F65C62CFB4471ADE0D52B285BA13A03BEA7CF81C5380D7D6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-06_617f81ad23cb610b38b9567e03cf5ee1_agent-tesla_amadey_elex_glassworm_icedid_karagany_mafia_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_617f81ad23cb610b38b9567e03cf5ee1_agent-tesla_amadey_elex_glassworm_icedid_karagany_mafia_.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_617f81ad23cb610b38b9567e03cf5ee1_agent-tesla_amadey_elex_glassworm_icedid_karagany_mafia_njrat_ransomhub_remcos_rhadamanthys_smoke-loader_stealc
- Size 22.3MB
- SHA256 8e9f8a7e683a0eaf4e60aaf0be27316933856b4f3f44f0099c46359eb4739f30
- MD5 617f81ad23cb610b38b9567e03cf5ee1
- SHA1 1e4a3d68cd9d2736fcb09720ebfdff8555d225b4
- SHA512 0c11b3039c015f3d20f9b3a0832a29134b82f2b227d73a002c9867efbbc4c8bced48e76ec0f7a7dab775cb7abd7eb35d60f86d789c351eec9d56487441cc50f0
- SSDEEP 393216:PQO0rl/RRSgIurgjyGgN2yP5l/RRwLg5O0AjGgNsFuK:PQOel/RRMX0t5l/RRlOTpG
- TLSH T1F0376C92BF62D824DA7501F65C62CFB4471ADE0D52B285BA13A03BEA7CF81C5380D7D6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detect Neshta payload
-
Family: Neshta
Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.
-
Detects executables built or packed with MPress PE compressor