General
- Target 2026-06-27_347f6e41ef232d852fd2f85944f6e36f_agent-tesla_amadey_avoslocker_cobalt-strike_darkgate_elex_glassworm_hawkeye_hijackloader_icedid_karagany_luca-stealer_lynx_mafia_njrat_play_remcos_rhadamanthys_smoke-loader_stealc_tofsee
- Size 14.5MB
- Sample260629-khrjmshs3z
- SHA256 7fd2efec38530d170b992945fe633a570bd1f1a0b232a424719b4c22fbb07e63
- MD5 347f6e41ef232d852fd2f85944f6e36f
- SHA1 300875b39b4de795f61b666c543be685a1dfc8ca
- SHA512 f8807cdc9380bfc9230e26e55670172cb09a3e1072c71a15f178e02d54b1ef4f4788737598b264f395fdfe0768277f74ee3059c48fe92d456603e5d70e0536d7
- SSDEEP 196608:rquFIF0wuPlCKrjRRquFIF0wuPlCKrjR:GoUmioUm
- TLSH T136E69E1273D48035F5B316319A3592695A3ABCA58F32CA9F33882D5D6FB16C08E39737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-06-27_347f6e41ef232d852fd2f85944f6e36f_agent-tesla_amadey_avoslocker_cobalt-strike_darkgate_ele.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_347f6e41ef232d852fd2f85944f6e36f_agent-tesla_amadey_avoslocker_cobalt-strike_darkgate_ele.exe
Resource
win11ltsc2024-20260617-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_347f6e41ef232d852fd2f85944f6e36f_agent-tesla_amadey_avoslocker_cobalt-strike_darkgate_elex_glassworm_hawkeye_hijackloader_icedid_karagany_luca-stealer_lynx_mafia_njrat_play_remcos_rhadamanthys_smoke-loader_stealc_tofsee
- Size 14.5MB
- SHA256 7fd2efec38530d170b992945fe633a570bd1f1a0b232a424719b4c22fbb07e63
- MD5 347f6e41ef232d852fd2f85944f6e36f
- SHA1 300875b39b4de795f61b666c543be685a1dfc8ca
- SHA512 f8807cdc9380bfc9230e26e55670172cb09a3e1072c71a15f178e02d54b1ef4f4788737598b264f395fdfe0768277f74ee3059c48fe92d456603e5d70e0536d7
- SSDEEP 196608:rquFIF0wuPlCKrjRRquFIF0wuPlCKrjR:GoUmioUm
- TLSH T136E69E1273D48035F5B316319A3592695A3ABCA58F32CA9F33882D5D6FB16C08E39737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.