General
- Target 2026-06-28_3c9d86fd38f73f920341f860ece1590f_agent-tesla_amadey_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_smoke-loader_stealc
- Size 6.7MB
- Sample260628-27hfpsf191
- SHA256 db63ec9339f0b1a06f1bcaf03c412829d8cf64e1dc4df7df6be3d85739879a09
- MD5 3c9d86fd38f73f920341f860ece1590f
- SHA1 1dc5184eac281796242aa049d3d4d53b11a9012b
- SHA512 20ca18417673d1e13c81f88070cf8f6a0d3974eadf7b26734a4e3e9c33b4cf50730c4c14c575875361a103d64bc50224e05750e1493b8ab0dfc1b88cd45a72d5
- SSDEEP 98304:OKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jR4TUxk5nK:OquFIF0wuPlCKrjRvU
- TLSH T141669E1273D84035F5B3163199759229667ABCA58E33CA9F328C2D5E7FB16808E39733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-06-28_3c9d86fd38f73f920341f860ece1590f_agent-tesla_amadey_darkgate_glassworm_hawkeye_hijackload.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-28_3c9d86fd38f73f920341f860ece1590f_agent-tesla_amadey_darkgate_glassworm_hawkeye_hijackload.exe
Resource
win11ltsc2024-20260617-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_3c9d86fd38f73f920341f860ece1590f_agent-tesla_amadey_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_smoke-loader_stealc
- Size 6.7MB
- SHA256 db63ec9339f0b1a06f1bcaf03c412829d8cf64e1dc4df7df6be3d85739879a09
- MD5 3c9d86fd38f73f920341f860ece1590f
- SHA1 1dc5184eac281796242aa049d3d4d53b11a9012b
- SHA512 20ca18417673d1e13c81f88070cf8f6a0d3974eadf7b26734a4e3e9c33b4cf50730c4c14c575875361a103d64bc50224e05750e1493b8ab0dfc1b88cd45a72d5
- SSDEEP 98304:OKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jR4TUxk5nK:OquFIF0wuPlCKrjRvU
- TLSH T141669E1273D84035F5B3163199759229667ABCA58E33CA9F328C2D5E7FB16808E39733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.