General
- Target 2026-08-09_caf96d3de13187689256fb5223e4d1c7_agent-tesla_elex_hawkeye_maze_netwire_remcos_xloader
- Size 1.4MB
- Sample260809-ltsfrayvfy
- SHA256 b841a449aee707e81f2db5093e50abe4de83c4f471793f8e5704e568203288f5
- MD5 caf96d3de13187689256fb5223e4d1c7
- SHA1 dbcc873e81f25c7762a2dfad8063d8e7f30518f7
- SHA512 07cb9ab7e96594017f4355c0ace02e102b86cca541f5ebd8154116bd891f299f2b169cafc5880141c04ec6d28756e2f9de676dbef2d2afea0adc37fdd8f7bce5
- SSDEEP 24576:du6J3xO0c+JY5UZ+XCHkGsoEAdx20W4njUprvVcC1f2o5RRfg0:vo0c++OCokGs7Adgrd1f26Rr
- TLSH T14A65BE52E38EC2F0DE165172BA7DF73A1E3B3C254530B9566FC5ED3AAD21021112DAA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-09_caf96d3de13187689256fb5223e4d1c7_agent-tesla_elex_hawkeye_maze_netwire_remcos_xloader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_caf96d3de13187689256fb5223e4d1c7_agent-tesla_elex_hawkeye_maze_netwire_remcos_xloader
- Size 1.4MB
- SHA256 b841a449aee707e81f2db5093e50abe4de83c4f471793f8e5704e568203288f5
- MD5 caf96d3de13187689256fb5223e4d1c7
- SHA1 dbcc873e81f25c7762a2dfad8063d8e7f30518f7
- SHA512 07cb9ab7e96594017f4355c0ace02e102b86cca541f5ebd8154116bd891f299f2b169cafc5880141c04ec6d28756e2f9de676dbef2d2afea0adc37fdd8f7bce5
- SSDEEP 24576:du6J3xO0c+JY5UZ+XCHkGsoEAdx20W4njUprvVcC1f2o5RRfg0:vo0c++OCokGs7Adgrd1f26Rr
- TLSH T14A65BE52E38EC2F0DE165172BA7DF73A1E3B3C254530B9566FC5ED3AAD21021112DAA3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
NetWire RAT payload
-
AutoIT Executable
AutoIT scripts compiled to PE executables.