General
- Target 2026-08-19_36b2271b94e9f2aa70c22ada29dd2d14_agent-tesla_elex_hawkeye_maze_netwire_remcos_xloader
- Size 1.4MB
- Sample260819-nyerkataqf
- SHA256 0a685779e78c8d2371ef1d693ec89fca193ed77961860066e5d86f69807eb063
- MD5 36b2271b94e9f2aa70c22ada29dd2d14
- SHA1 c72c5a8bd0ece35f63b29fb00eb8a22c9b59a6a6
- SHA512 4610d263414dd0e3b535003fc0aa00940773215683f4d7b68fb3f45c1d1faddaad5eb60f1446e1041b90a14753dd5692f10bd3bd1191165f4eedb9f7edbe82b7
- SSDEEP 24576:du6J3xO0c+JY5UZ+XCHkGsoEAdx20W4njUprvVcC1f2o5RRfgO:vo0c++OCokGs7Adgrd1f26Rp
- TLSH T13B65BE52F38EC2F0DE165172BA79F73A1E3B3C254530B9566FC5ED3AAD21021112DAA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-19_36b2271b94e9f2aa70c22ada29dd2d14_agent-tesla_elex_hawkeye_maze_netwire_remcos_xloader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_36b2271b94e9f2aa70c22ada29dd2d14_agent-tesla_elex_hawkeye_maze_netwire_remcos_xloader
- Size 1.4MB
- SHA256 0a685779e78c8d2371ef1d693ec89fca193ed77961860066e5d86f69807eb063
- MD5 36b2271b94e9f2aa70c22ada29dd2d14
- SHA1 c72c5a8bd0ece35f63b29fb00eb8a22c9b59a6a6
- SHA512 4610d263414dd0e3b535003fc0aa00940773215683f4d7b68fb3f45c1d1faddaad5eb60f1446e1041b90a14753dd5692f10bd3bd1191165f4eedb9f7edbe82b7
- SSDEEP 24576:du6J3xO0c+JY5UZ+XCHkGsoEAdx20W4njUprvVcC1f2o5RRfgO:vo0c++OCokGs7Adgrd1f26Rp
- TLSH T13B65BE52F38EC2F0DE165172BA79F73A1E3B3C254530B9566FC5ED3AAD21021112DAA3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
NetWire RAT payload
-
AutoIT Executable
AutoIT scripts compiled to PE executables.