General
- Target 2026-08-08_3ceea58782b69090b7be50df191ea9cc_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_satacom_smoke-loader_stealc_stop_vidar
- Size 14.7MB
- Sample260808-wl7ktabm3t
- SHA256 9695b99b4bcab94d690153835d9f2b3c977e9b56798d755a487024544ac523c3
- MD5 3ceea58782b69090b7be50df191ea9cc
- SHA1 c55b1eff49d933a414742329b460d01795d55c75
- SHA512 b58e247c47985b4a0f32daa3c141512794c1f00406bebe07b975c2419cdf1af4c804b5f62dbb9c034f365276e164966d909e5a5fc00ad7b82a3e5e5491937a40
- SSDEEP 196608:AquFIF0wuPlCKrjRBfSfG77Vdd6GNXIXbD9cf3D8wYyNPEgFA6FGauQ9+:ZoUmd7YCP9FA6saB9+
- TLSH T114F6070267EC0428F5F32B349B3999549A3BBC660B35D9DF11582C5D0F73A828E76B72
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-08_3ceea58782b69090b7be50df191ea9cc_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_3ceea58782b69090b7be50df191ea9cc_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_3ceea58782b69090b7be50df191ea9cc_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_satacom_smoke-loader_stealc_stop_vidar
- Size 14.7MB
- SHA256 9695b99b4bcab94d690153835d9f2b3c977e9b56798d755a487024544ac523c3
- MD5 3ceea58782b69090b7be50df191ea9cc
- SHA1 c55b1eff49d933a414742329b460d01795d55c75
- SHA512 b58e247c47985b4a0f32daa3c141512794c1f00406bebe07b975c2419cdf1af4c804b5f62dbb9c034f365276e164966d909e5a5fc00ad7b82a3e5e5491937a40
- SSDEEP 196608:AquFIF0wuPlCKrjRBfSfG77Vdd6GNXIXbD9cf3D8wYyNPEgFA6FGauQ9+:ZoUmd7YCP9FA6saB9+
- TLSH T114F6070267EC0428F5F32B349B3999549A3BBC660B35D9DF11582C5D0F73A828E76B72
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables manipulated with Fody
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
AutoIT Executable
AutoIT scripts compiled to PE executables.