General
- Target 2026-08-10_4d4657ccdb0393b479dcf235a39682d4_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_satacom_smoke-loader_stealc_stop_vidar
- Size 28.5MB
- Sample260810-mljpba1xhx
- SHA256 ee1ac0fd66a36f6b3811498740a29f13a93d31196b7cea744687545de25d1bcd
- MD5 4d4657ccdb0393b479dcf235a39682d4
- SHA1 81359cf3a8324df78f72232fc152bb13ef106340
- SHA512 1168f76f042d1923b4503a87d4f0fdc6a1c0d1404cc4a18ef8cd35c497d7b984e710011a27f6ec12cd17146ca465efeef6c6ec1065116766196b97cb0973c990
- SSDEEP 196608:equFIF0wuPlCKrjRlXLRquFIF0wuPlCKrjRlXLRquFIF0wuPlCKrjRlXLRquFIF2:/oUmvUoUmvUoUmvUoUmv
- TLSH T1E867AF1273D85435F5B31231993492296A39BCA58F32CA9F338C2D5E7F716809A3A737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-10_4d4657ccdb0393b479dcf235a39682d4_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_4d4657ccdb0393b479dcf235a39682d4_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_4d4657ccdb0393b479dcf235a39682d4_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_satacom_smoke-loader_stealc_stop_vidar
- Size 28.5MB
- SHA256 ee1ac0fd66a36f6b3811498740a29f13a93d31196b7cea744687545de25d1bcd
- MD5 4d4657ccdb0393b479dcf235a39682d4
- SHA1 81359cf3a8324df78f72232fc152bb13ef106340
- SHA512 1168f76f042d1923b4503a87d4f0fdc6a1c0d1404cc4a18ef8cd35c497d7b984e710011a27f6ec12cd17146ca465efeef6c6ec1065116766196b97cb0973c990
- SSDEEP 196608:equFIF0wuPlCKrjRlXLRquFIF0wuPlCKrjRlXLRquFIF0wuPlCKrjRlXLRquFIF2:/oUmvUoUmvUoUmvUoUmv
- TLSH T1E867AF1273D85435F5B31231993492296A39BCA58F32CA9F338C2D5E7F716809A3A737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables manipulated with Fody
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
AutoIT Executable
AutoIT scripts compiled to PE executables.