General
- Target 2026-08-11_4f21211ce2a9e78909a846aeab718479_agent-tesla_amadey_avoslocker_cobalt-strike_darkgate_elex_glassworm_hawkeye_hellokitty_hijackloader_luca-stealer_lynx_njrat_remcos_rhadamanthys_smoke-loader_stealc_stop_vidar_wannacry
- Size 11.3MB
- Sample260811-dsk2aaer9s
- SHA256 ec73f2944dd5e7092d3a05ed7dfa77bf82590578e2dc4472ad4bb73becd369df
- MD5 4f21211ce2a9e78909a846aeab718479
- SHA1 6b2c9b4d783016d552a14f9cf9f87ba5d5ea4ef2
- SHA512 4a8743f161c208c98399f1928af34b3e1beb617aa726885f566493eabda5fe7966033265940024608e5282d9f73be50213ae62c20ae50efe9d3841874b1b9afa
- SSDEEP 196608:f3KWQc0gEYnvLhCKkFIF0wuC3KWQc0gEYnvLhCKkFIF0wu:GcZEIvUl3cZEIvUl
- TLSH T1FCC6CF12B7D1C032F5B312328ABAD2555A78B8654B3286DF73CC162E5F316D19B36B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-11_4f21211ce2a9e78909a846aeab718479_agent-tesla_amadey_avoslocker_cobalt-strike_darkgate_ele.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-11_4f21211ce2a9e78909a846aeab718479_agent-tesla_amadey_avoslocker_cobalt-strike_darkgate_ele.exe
Resource
win11ltsc2024-20260710-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-11_4f21211ce2a9e78909a846aeab718479_agent-tesla_amadey_avoslocker_cobalt-strike_darkgate_elex_glassworm_hawkeye_hellokitty_hijackloader_luca-stealer_lynx_njrat_remcos_rhadamanthys_smoke-loader_stealc_stop_vidar_wannacry
- Size 11.3MB
- SHA256 ec73f2944dd5e7092d3a05ed7dfa77bf82590578e2dc4472ad4bb73becd369df
- MD5 4f21211ce2a9e78909a846aeab718479
- SHA1 6b2c9b4d783016d552a14f9cf9f87ba5d5ea4ef2
- SHA512 4a8743f161c208c98399f1928af34b3e1beb617aa726885f566493eabda5fe7966033265940024608e5282d9f73be50213ae62c20ae50efe9d3841874b1b9afa
- SSDEEP 196608:f3KWQc0gEYnvLhCKkFIF0wuC3KWQc0gEYnvLhCKkFIF0wu:GcZEIvUl3cZEIvUl
- TLSH T1FCC6CF12B7D1C032F5B312328ABAD2555A78B8654B3286DF73CC162E5F316D19B36B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.