General
- Target 2026-08-13_5cb5b911bc67b6c43ff434a3865b332e_agent-tesla_amadey_cobalt-strike_darkgate_fabookie_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_rhadamanthys_satacom_smoke-loader_stealc_vidar
- Size 10.6MB
- Sample260813-lhr1vavyav
- SHA256 9b1340142be883ec209a211e87c38d5c34d1d908ff777b85ad752b69903611ec
- MD5 5cb5b911bc67b6c43ff434a3865b332e
- SHA1 a845da4b6403de95f617aa81cb21e50c14a20025
- SHA512 5e0365ce2ed922010ea368b61c755398f81490aae8f83479bc1013282f47faa2b590747d25a16c6de48773f6830874aa6418a9a12c22f5f6194377c8f1973515
- SSDEEP 98304:BllR35B2cPK8x07ppj7Upmya6iSNNEuy4v/YtfKoNewC8rc8u3xP33A://35YCKzj7APhNNECwHrc8u3x3Q
- TLSH T144B69D27B39940F5D56AD238CB6B4622EA7A7C500731A6DF035076252F33BE05B3E7A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-13_5cb5b911bc67b6c43ff434a3865b332e_agent-tesla_amadey_cobalt-strike_darkgate_fabookie_glass.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_5cb5b911bc67b6c43ff434a3865b332e_agent-tesla_amadey_cobalt-strike_darkgate_fabookie_glass.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_5cb5b911bc67b6c43ff434a3865b332e_agent-tesla_amadey_cobalt-strike_darkgate_fabookie_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_rhadamanthys_satacom_smoke-loader_stealc_vidar
- Size 10.6MB
- SHA256 9b1340142be883ec209a211e87c38d5c34d1d908ff777b85ad752b69903611ec
- MD5 5cb5b911bc67b6c43ff434a3865b332e
- SHA1 a845da4b6403de95f617aa81cb21e50c14a20025
- SHA512 5e0365ce2ed922010ea368b61c755398f81490aae8f83479bc1013282f47faa2b590747d25a16c6de48773f6830874aa6418a9a12c22f5f6194377c8f1973515
- SSDEEP 98304:BllR35B2cPK8x07ppj7Upmya6iSNNEuy4v/YtfKoNewC8rc8u3xP33A://35YCKzj7APhNNECwHrc8u3x3Q
- TLSH T144B69D27B39940F5D56AD238CB6B4622EA7A7C500731A6DF035076252F33BE05B3E7A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
AutoIT Executable
AutoIT scripts compiled to PE executables.