General
- Target 2026-06-28_e9961fc1aad37fcbe9f196152b4ed44d_agent-tesla_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_smoke-loader_stealc
- Size 16.8MB
- Sample260628-wt38csa18z
- SHA256 787962cac6d9747db977b498918512eed60bfb518d23355bff88a531bb895f8b
- MD5 e9961fc1aad37fcbe9f196152b4ed44d
- SHA1 5b5ac34a68cbed7b6ed3aac08dba1a92c84b6b8e
- SHA512 85561164f8075cf369f64caa18f75064d0f936d45ae859cefe7b23790b52804235fb2f2c61a85afb2937db9f1ab15e3c135c98a180be6f8ada9409e34556202b
- SSDEEP 196608:bLZ7pj8quFIF0wuPlCKrjRLLZ7pj8quFIF0wuPlCKrjRLLZ7pjXLZ7pjK:h7tdoUmb7tdoUmb7t97tK
- TLSH T1FF07AE1272D44035F5B316329A3592646A39BD659B32CA9F33C83D5E7FB16C08A3A733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-06-28_e9961fc1aad37fcbe9f196152b4ed44d_agent-tesla_amadey_cobalt-strike_darkgate_elex_glassworm.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-28_e9961fc1aad37fcbe9f196152b4ed44d_agent-tesla_amadey_cobalt-strike_darkgate_elex_glassworm.exe
Resource
win11ltsc2024-20260618-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_e9961fc1aad37fcbe9f196152b4ed44d_agent-tesla_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_smoke-loader_stealc
- Size 16.8MB
- SHA256 787962cac6d9747db977b498918512eed60bfb518d23355bff88a531bb895f8b
- MD5 e9961fc1aad37fcbe9f196152b4ed44d
- SHA1 5b5ac34a68cbed7b6ed3aac08dba1a92c84b6b8e
- SHA512 85561164f8075cf369f64caa18f75064d0f936d45ae859cefe7b23790b52804235fb2f2c61a85afb2937db9f1ab15e3c135c98a180be6f8ada9409e34556202b
- SSDEEP 196608:bLZ7pj8quFIF0wuPlCKrjRLLZ7pj8quFIF0wuPlCKrjRLLZ7pjXLZ7pjK:h7tdoUmb7tdoUmb7t97tK
- TLSH T1FF07AE1272D44035F5B316329A3592646A39BD659B32CA9F33C83D5E7FB16C08A3A733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.