General
- Target 2026-09-05_633fff00ba395b148617c5e67538f2cf_agent-tesla_elex_hawkeye_maze_netwire_remcos_xloader
- Size 1.4MB
- Sample260907-yspppavdnf
- SHA256 8ebfaa41119f68142f20935f20f71b51fc81a07ba20831e3da99d1e84a2df3f8
- MD5 633fff00ba395b148617c5e67538f2cf
- SHA1 636242ca38e9b5e83a6dba7109f932efffebb57c
- SHA512 976d0fcc3c859da9c7ae12a969c99e8b288b8219caa90eafc086bc38317262e5b9fab0bff996f0fe39cb06b139fa6d3e504bcf1be258eb1f3a5207c0e04c5e18
- SSDEEP 24576:du6J3xO0c+JY5UZ+XCHkGsoEAdx20W4njUprvVcC1f2o5RRfgI:vo0c++OCokGs7Adgrd1f26RT
- TLSH T1D265BE52E38EC2F0DE165172BA7DF73A1E3B3C254530B9566FC5ED3AAD21021112DAA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-05_633fff00ba395b148617c5e67538f2cf_agent-tesla_elex_hawkeye_maze_netwire_remcos_xloader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-05_633fff00ba395b148617c5e67538f2cf_agent-tesla_elex_hawkeye_maze_netwire_remcos_xloader
- Size 1.4MB
- SHA256 8ebfaa41119f68142f20935f20f71b51fc81a07ba20831e3da99d1e84a2df3f8
- MD5 633fff00ba395b148617c5e67538f2cf
- SHA1 636242ca38e9b5e83a6dba7109f932efffebb57c
- SHA512 976d0fcc3c859da9c7ae12a969c99e8b288b8219caa90eafc086bc38317262e5b9fab0bff996f0fe39cb06b139fa6d3e504bcf1be258eb1f3a5207c0e04c5e18
- SSDEEP 24576:du6J3xO0c+JY5UZ+XCHkGsoEAdx20W4njUprvVcC1f2o5RRfgI:vo0c++OCokGs7Adgrd1f26RT
- TLSH T1D265BE52E38EC2F0DE165172BA7DF73A1E3B3C254530B9566FC5ED3AAD21021112DAA3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
NetWire RAT payload
-
AutoIT Executable
AutoIT scripts compiled to PE executables.