General
- Target 2026-06-28_0befc911fbf56ff56cecb43357ec92f7_agent-tesla_amadey_avoslocker_cobalt-strike_darkgate_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_lynx_njrat_play_remcos_smoke-loader_wannacry
- Size 7.8MB
- Sample260629-av722saw2n
- SHA256 b081470da051d40eb67c502f4f51298dc1f4b5739eda86113c5b51dd3e4c6d50
- MD5 0befc911fbf56ff56cecb43357ec92f7
- SHA1 3c5185fcef606136f672dde15b96ee3a70fd8138
- SHA512 684184d8ff7d8fc949fa75962dcafe862639b2c63262f421e05c2afa0dc5e779efc414cf3fd8066043e27fa762be3e49fb6019f5a293aa4fc33383030c21feca
- SSDEEP 98304:7SERb2KRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jR4TUxS7PL8SERbFY:wquFIF0wuPlCKrjRvqz1
- TLSH T19E86AE1277D44035F1B316318A3592655A7EBC658E32CA8F338C2EAE6F716809B39737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-06-28_0befc911fbf56ff56cecb43357ec92f7_agent-tesla_amadey_avoslocker_cobalt-strike_darkgate_ele.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-28_0befc911fbf56ff56cecb43357ec92f7_agent-tesla_amadey_avoslocker_cobalt-strike_darkgate_ele.exe
Resource
win11ltsc2024-20260617-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_0befc911fbf56ff56cecb43357ec92f7_agent-tesla_amadey_avoslocker_cobalt-strike_darkgate_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_lynx_njrat_play_remcos_smoke-loader_wannacry
- Size 7.8MB
- SHA256 b081470da051d40eb67c502f4f51298dc1f4b5739eda86113c5b51dd3e4c6d50
- MD5 0befc911fbf56ff56cecb43357ec92f7
- SHA1 3c5185fcef606136f672dde15b96ee3a70fd8138
- SHA512 684184d8ff7d8fc949fa75962dcafe862639b2c63262f421e05c2afa0dc5e779efc414cf3fd8066043e27fa762be3e49fb6019f5a293aa4fc33383030c21feca
- SSDEEP 98304:7SERb2KRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jR4TUxS7PL8SERbFY:wquFIF0wuPlCKrjRvqz1
- TLSH T19E86AE1277D44035F1B316318A3592655A7EBC658E32CA8F338C2EAE6F716809B39737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.