General
- Target 2026-06-28_bfee13c27ff9fe55af2b21339f1b882d_agent-tesla_amadey_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_smoke-loader_stealc_tofsee
- Size 6.4MB
- Sample260628-x29wjsct8x
- SHA256 33e851f552dbdbb531236e238116d28d739e19f4c36d99ced99180333632205d
- MD5 bfee13c27ff9fe55af2b21339f1b882d
- SHA1 903e74cd43c7ba92b1ac1caaecedddb7f6510d15
- SHA512 89cb26ca8b07ee02fe5f0c4e8d1999af650989e3d466b36e40f51485bf69317c609bb545ef8cd85cf91904d99cb1e9b5edd035c19e8bc7aec6c4da01244223c0
- SSDEEP 98304:OKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jR4TUeMt:OquFIF0wuPlCKrjRh
- TLSH T199669E1273D44035F5B316319A3592695A7ABCA58E33CA9F328C2D5E7FB06C08A39737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-06-28_bfee13c27ff9fe55af2b21339f1b882d_agent-tesla_amadey_darkgate_glassworm_hawkeye_hijackload.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-28_bfee13c27ff9fe55af2b21339f1b882d_agent-tesla_amadey_darkgate_glassworm_hawkeye_hijackload.exe
Resource
win11ltsc2024-20260617-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_bfee13c27ff9fe55af2b21339f1b882d_agent-tesla_amadey_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_smoke-loader_stealc_tofsee
- Size 6.4MB
- SHA256 33e851f552dbdbb531236e238116d28d739e19f4c36d99ced99180333632205d
- MD5 bfee13c27ff9fe55af2b21339f1b882d
- SHA1 903e74cd43c7ba92b1ac1caaecedddb7f6510d15
- SHA512 89cb26ca8b07ee02fe5f0c4e8d1999af650989e3d466b36e40f51485bf69317c609bb545ef8cd85cf91904d99cb1e9b5edd035c19e8bc7aec6c4da01244223c0
- SSDEEP 98304:OKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jR4TUeMt:OquFIF0wuPlCKrjRh
- TLSH T199669E1273D44035F5B316319A3592695A7ABCA58E33CA9F328C2D5E7FB06C08A39737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.