General
- Target 2026-08-10_2998641cfbbfd26e0bac2665bfe3cb62_agent-tesla_amadey_cobalt-strike_darkgate_fabookie_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_satacom_smoke-loader_stealc_vidar
- Size 37.6MB
- Sample260810-t1px7sysgt
- SHA256 7cd52b023d55da222a96b8282868d5030d44cc1c83e014be8ef634a3cd36eddc
- MD5 2998641cfbbfd26e0bac2665bfe3cb62
- SHA1 ffd5eba4fd449734aa5995784816ce175ee32f28
- SHA512 ad6007be2977e1855b17459599077c55c79559e657dee819a315c764cabb5ed838d0a005314a0ba83fe0c96e6c1a3bc0cc399ead05bee1101d807fc3782353a3
- SSDEEP 393216://357WahvQHrc8u3xXJ/f4uUWHDyv/357WahvQHrc8u3xXJ/f4uUWHDy:35LvQHrK5/f4uUI05LvQHrK5/f4uUI
- TLSH T131879E13B39681A5D07BD2B88A674212D7BA7C500730A7DF1294776D2F33BE49B3A361
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
5 signatures
Behavioral task
behavioral1
Sample
2026-08-10_2998641cfbbfd26e0bac2665bfe3cb62_agent-tesla_amadey_cobalt-strike_darkgate_fabookie_glass.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_2998641cfbbfd26e0bac2665bfe3cb62_agent-tesla_amadey_cobalt-strike_darkgate_fabookie_glass.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_2998641cfbbfd26e0bac2665bfe3cb62_agent-tesla_amadey_cobalt-strike_darkgate_fabookie_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_satacom_smoke-loader_stealc_vidar
- Size 37.6MB
- SHA256 7cd52b023d55da222a96b8282868d5030d44cc1c83e014be8ef634a3cd36eddc
- MD5 2998641cfbbfd26e0bac2665bfe3cb62
- SHA1 ffd5eba4fd449734aa5995784816ce175ee32f28
- SHA512 ad6007be2977e1855b17459599077c55c79559e657dee819a315c764cabb5ed838d0a005314a0ba83fe0c96e6c1a3bc0cc399ead05bee1101d807fc3782353a3
- SSDEEP 393216://357WahvQHrc8u3xXJ/f4uUWHDyv/357WahvQHrc8u3xXJ/f4uUWHDy:35LvQHrK5/f4uUI05LvQHrK5/f4uUI
- TLSH T131879E13B39681A5D07BD2B88A674212D7BA7C500730A7DF1294776D2F33BE49B3A361
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with Dotfuscator
-
Detects executables packed with SmartAssembly
-
Detects executables packed with Yano Obfuscator
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
AutoIT Executable
AutoIT scripts compiled to PE executables.