General
- Target 2026-06-28_e80f332d8ff2739e7573b4393e66c88d_agent-tesla_amadey_blankgrabber_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rugmi_satacom_smoke-loader
- Size 12.6MB
- Sample260628-wv7beabw9l
- SHA256 66e8d3ff0ec37b3facac175128588c1e56f46f0a7cac988af52fcf5e40aebe0b
- MD5 e80f332d8ff2739e7573b4393e66c88d
- SHA1 7c7120fb7f4a0f59da437bc437d3f621759f7b19
- SHA512 b0112e0df8235c16df5a630dc9d21eb5a3fae0e104b6225e02f2da84fdf6cd4c6c4f2ec1618bb7b4966af298b747a920a52e32b942b6a614bd69e367a31eb716
- SSDEEP 196608:BquFIF0wuPlCK8quFIF0wuPlCKrjRvGtLZ7pjK:EoUqoUm1Gb7tK
- TLSH T12ED6AE1272D49075F5B31631897592296A39BC658B338D9F338C2D9E6FB06C09E3A733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-06-28_e80f332d8ff2739e7573b4393e66c88d_agent-tesla_amadey_blankgrabber_cobalt-strike_darkgate_g.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-28_e80f332d8ff2739e7573b4393e66c88d_agent-tesla_amadey_blankgrabber_cobalt-strike_darkgate_g.exe
Resource
win11ltsc2024-20260618-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_e80f332d8ff2739e7573b4393e66c88d_agent-tesla_amadey_blankgrabber_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rugmi_satacom_smoke-loader
- Size 12.6MB
- SHA256 66e8d3ff0ec37b3facac175128588c1e56f46f0a7cac988af52fcf5e40aebe0b
- MD5 e80f332d8ff2739e7573b4393e66c88d
- SHA1 7c7120fb7f4a0f59da437bc437d3f621759f7b19
- SHA512 b0112e0df8235c16df5a630dc9d21eb5a3fae0e104b6225e02f2da84fdf6cd4c6c4f2ec1618bb7b4966af298b747a920a52e32b942b6a614bd69e367a31eb716
- SSDEEP 196608:BquFIF0wuPlCK8quFIF0wuPlCKrjRvGtLZ7pjK:EoUqoUm1Gb7tK
- TLSH T12ED6AE1272D49075F5B31631897592296A39BC658B338D9F338C2D9E6FB06C09E3A733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.