General
- Target 2026-10-23_249c35ce0af4394c1da2425991a93260_agent-tesla_elex_hawkeye_maze_netwire_remcos_xloader
- Size 1.4MB
- Sample261023-rmse3asy7l
- SHA256 3c4f52f4b5d15b28b8f49177fce8c366351b9d546d722977957057baa0b2b8b9
- MD5 249c35ce0af4394c1da2425991a93260
- SHA1 f632249ff56e8e59d2089d711a460cf3f155e3f5
- SHA512 965053e4bfbc53095d3adf464a60058c027ab6959c66547c28281f5cf673098bca73db50fcd91e31852d8c9220f804b99f719c1c7eb8ce4145a5d909f2b1d406
- SSDEEP 24576:du6J3xO0c+JY5UZ+XCHkGsoEAdx20W4njUprvVcC1f2o5RRfg/:vo0c++OCokGs7Adgrd1f26Rs
- TLSH T1F365BE52F38EC2F0DE165172BA79F73A1E3B3C254530B9566FC5ED3AAD21021112DAA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-23_249c35ce0af4394c1da2425991a93260_agent-tesla_elex_hawkeye_maze_netwire_remcos_xloader.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-23_249c35ce0af4394c1da2425991a93260_agent-tesla_elex_hawkeye_maze_netwire_remcos_xloader
- Size 1.4MB
- SHA256 3c4f52f4b5d15b28b8f49177fce8c366351b9d546d722977957057baa0b2b8b9
- MD5 249c35ce0af4394c1da2425991a93260
- SHA1 f632249ff56e8e59d2089d711a460cf3f155e3f5
- SHA512 965053e4bfbc53095d3adf464a60058c027ab6959c66547c28281f5cf673098bca73db50fcd91e31852d8c9220f804b99f719c1c7eb8ce4145a5d909f2b1d406
- SSDEEP 24576:du6J3xO0c+JY5UZ+XCHkGsoEAdx20W4njUprvVcC1f2o5RRfg/:vo0c++OCokGs7Adgrd1f26Rs
- TLSH T1F365BE52F38EC2F0DE165172BA79F73A1E3B3C254530B9566FC5ED3AAD21021112DAA3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
NetWire RAT payload
-
AutoIT Executable
AutoIT scripts compiled to PE executables.