General
- Target 2026-11-02_ccdedf12303d81db506ac9768de41770_agent-tesla_amadey_darkgate_elex_hawkeye_maze_remcos
- Size 4.4MB
- Sample261102-2e37pszw8m
- SHA256 186189c0721840334eaaee8c042b79337dbfeaae8bf1384ac7914919c42c11a3
- MD5 ccdedf12303d81db506ac9768de41770
- SHA1 d8f25a672e694e1f30cbfce7a47af39db3f5a2ea
- SHA512 701b5d7045724fd302d2b33ffe0eddef1a64cbb3a5924e1aa0ef10cd37f5de2348f8ea95e5d0ec093eeb0c684d3e1772e3a19a1a2a5c3f33c866011979018761
- SSDEEP 98304:e2cPK8zG0lnrS+OHgUs8223D4Ms61ixdfdXOR:xCKArBn822tXcvFOR
- TLSH T1242602036390D032FE5A81735F26B396AD797C7E063BC91F12D83EA66870771222D5A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-11-02_ccdedf12303d81db506ac9768de41770_agent-tesla_amadey_darkgate_elex_hawkeye_maze_remcos.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-02_ccdedf12303d81db506ac9768de41770_agent-tesla_amadey_darkgate_elex_hawkeye_maze_remcos.exe
Resource
win11ltsc2024-20260911-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-02_ccdedf12303d81db506ac9768de41770_agent-tesla_amadey_darkgate_elex_hawkeye_maze_remcos
- Size 4.4MB
- SHA256 186189c0721840334eaaee8c042b79337dbfeaae8bf1384ac7914919c42c11a3
- MD5 ccdedf12303d81db506ac9768de41770
- SHA1 d8f25a672e694e1f30cbfce7a47af39db3f5a2ea
- SHA512 701b5d7045724fd302d2b33ffe0eddef1a64cbb3a5924e1aa0ef10cd37f5de2348f8ea95e5d0ec093eeb0c684d3e1772e3a19a1a2a5c3f33c866011979018761
- SSDEEP 98304:e2cPK8zG0lnrS+OHgUs8223D4Ms61ixdfdXOR:xCKArBn822tXcvFOR
- TLSH T1242602036390D032FE5A81735F26B396AD797C7E063BC91F12D83EA66870771222D5A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
AutoIT Executable
AutoIT scripts compiled to PE executables.