General
- Target 2026-06-27_d1e292d24e08ed02fcef25b6372a5f70_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_satacom_smoke-loader_vidar
- Size 23.1MB
- Sample260629-c4pm6scv9k
- SHA256 e39ef5ff8cd61c8589ab939f8b9e6779c0c1d6ffdcd07480c003fa61ff0fef39
- MD5 d1e292d24e08ed02fcef25b6372a5f70
- SHA1 0b0f3101c485c7138e182214c1b76f73aab6a73c
- SHA512 1f2c4594883faca90ed2a0c80ef0635c05e4633b3b63eb6b4de22f7e7c6762660b9c9a73d87babfb10004f1bb435a91ace66aedb18cf2acdeb966d366cf7dc0d
- SSDEEP 196608:OquFIF0wuPlCK8quFIF0wuPlCKrjRQ8quFIF0wuPlCK8quFIF0wuPlCKrjRQ:voUqoUmooUqoUm
- TLSH T1D2379E1277D44031F5B316318A7592595A79BC658A33CE9F338C2D9EAFB16C08A3A733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-06-27_d1e292d24e08ed02fcef25b6372a5f70_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_d1e292d24e08ed02fcef25b6372a5f70_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win11ltsc2024-20260617-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_d1e292d24e08ed02fcef25b6372a5f70_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_satacom_smoke-loader_vidar
- Size 23.1MB
- SHA256 e39ef5ff8cd61c8589ab939f8b9e6779c0c1d6ffdcd07480c003fa61ff0fef39
- MD5 d1e292d24e08ed02fcef25b6372a5f70
- SHA1 0b0f3101c485c7138e182214c1b76f73aab6a73c
- SHA512 1f2c4594883faca90ed2a0c80ef0635c05e4633b3b63eb6b4de22f7e7c6762660b9c9a73d87babfb10004f1bb435a91ace66aedb18cf2acdeb966d366cf7dc0d
- SSDEEP 196608:OquFIF0wuPlCK8quFIF0wuPlCKrjRQ8quFIF0wuPlCK8quFIF0wuPlCKrjRQ:voUqoUmooUqoUm
- TLSH T1D2379E1277D44031F5B316318A7592595A79BC658A33CE9F338C2D9EAFB16C08A3A733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.