General
- Target 2026-10-29_5c1b26cc330fa62c39a2f9bee4953f8e_agent-tesla_elex_hawkeye_maze_netwire_remcos_xloader
- Size 1.4MB
- Sample261029-qgvskabc74
- SHA256 3e214e5d46a312df12a470768a57bcbb3db46d7847d5f8fb149b44afb8c1ded8
- MD5 5c1b26cc330fa62c39a2f9bee4953f8e
- SHA1 9a59725d1a5db447eb327b6ff3b3b64671ad8643
- SHA512 f00bef40f9090155ad568df0a52c528d66375ef8ca854129e4850266b82b820242307e92cd68becdf635ffa7a85de5de70f0dafd2140ac1f38746d85514fa1d9
- SSDEEP 24576:du6J3xO0c+JY5UZ+XCHkGsoEAdx20W4njUprvVcC1f2o5RRfge:vo0c++OCokGs7Adgrd1f26RN
- TLSH T17265BE52F38EC2F0DE165172BA79F73A1E3B3C254530B9566FC5ED3AAD21021112DAA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-29_5c1b26cc330fa62c39a2f9bee4953f8e_agent-tesla_elex_hawkeye_maze_netwire_remcos_xloader.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-29_5c1b26cc330fa62c39a2f9bee4953f8e_agent-tesla_elex_hawkeye_maze_netwire_remcos_xloader
- Size 1.4MB
- SHA256 3e214e5d46a312df12a470768a57bcbb3db46d7847d5f8fb149b44afb8c1ded8
- MD5 5c1b26cc330fa62c39a2f9bee4953f8e
- SHA1 9a59725d1a5db447eb327b6ff3b3b64671ad8643
- SHA512 f00bef40f9090155ad568df0a52c528d66375ef8ca854129e4850266b82b820242307e92cd68becdf635ffa7a85de5de70f0dafd2140ac1f38746d85514fa1d9
- SSDEEP 24576:du6J3xO0c+JY5UZ+XCHkGsoEAdx20W4njUprvVcC1f2o5RRfge:vo0c++OCokGs7Adgrd1f26RN
- TLSH T17265BE52F38EC2F0DE165172BA79F73A1E3B3C254530B9566FC5ED3AAD21021112DAA3
- MD5 SHA1 SHA512 SSDEEP TLSH
NetWire RAT payload
AutoIT Executable
AutoIT scripts compiled to PE executables.