General
- Target 2026-08-19_4f0c1e537926950282e618bc65e2327f_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hellokitty_hijackloader_icedid_luca-stealer_njrat_remcos_satacom_smoke-loader_stop_vidar
- Size 10.7MB
- Sample260819-2vyl6avfmf
- SHA256 a72399a1b7727a3aaa466dd5abb96fe50b66b0e15f2e9c77c1f38bfe2f8dc7c7
- MD5 4f0c1e537926950282e618bc65e2327f
- SHA1 416bd623eab48d84193c5a5d0670be5e4d5abe2c
- SHA512 eb46f09a9e5977025db066e7a89eba84832f4225952d8ff6cd3a4bdfd00ef5497581518d96ebe97810248be2d5f85171758f06d8652cab5dc7da22d162466d5c
- SSDEEP 196608:c3KWQc0gEYnvLhCKH2U3KWQc0gEYnvLhCKH2:5cZEIvUxcZEIvU
- TLSH T141B6BF01B7D4C031F6B31A318A7A92615A7EBC615F35C68F23C81A7D5E716D0EA39B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-19_4f0c1e537926950282e618bc65e2327f_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_4f0c1e537926950282e618bc65e2327f_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_4f0c1e537926950282e618bc65e2327f_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hellokitty_hijackloader_icedid_luca-stealer_njrat_remcos_satacom_smoke-loader_stop_vidar
- Size 10.7MB
- SHA256 a72399a1b7727a3aaa466dd5abb96fe50b66b0e15f2e9c77c1f38bfe2f8dc7c7
- MD5 4f0c1e537926950282e618bc65e2327f
- SHA1 416bd623eab48d84193c5a5d0670be5e4d5abe2c
- SHA512 eb46f09a9e5977025db066e7a89eba84832f4225952d8ff6cd3a4bdfd00ef5497581518d96ebe97810248be2d5f85171758f06d8652cab5dc7da22d162466d5c
- SSDEEP 196608:c3KWQc0gEYnvLhCKH2U3KWQc0gEYnvLhCKH2:5cZEIvUxcZEIvU
- TLSH T141B6BF01B7D4C031F6B31A318A7A92615A7EBC615F35C68F23C81A7D5E716D0EA39B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
AutoIT Executable
AutoIT scripts compiled to PE executables.