General
- Target 2026-06-30_50a719e0d75e3c799e6fc7aa17b722e3_agent-tesla_amadey_avoslocker_cobalt-strike_darkgate_elex_glassworm_hawkeye_hijackloader_icedid_karagany_luca-stealer_lynx_njrat_play_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc
- Size 15.1MB
- Sample260630-2m69bsht8m
- SHA256 f5bff56a4c7cf6180a1e9582557ceb9f471ffb4f4660419ea4518b9924a188db
- MD5 50a719e0d75e3c799e6fc7aa17b722e3
- SHA1 d5a291688b480e485fc1f0ff2c0510d22ce77ccc
- SHA512 7336b21ab64a97d30c5ff1dfeb9fb67cfcbb0210cd09030a795ef12baee2c5c5938b026ea88233535a8a4f4b048c323315840bd2409439e7d0e34109220e492a
- SSDEEP 196608:+quFIF0wuPlCKrjRvzquFIF0wuPlCKrjRvC:foUm1eoUm1C
- TLSH T1B8F6AE1277D48035F5B31631897592255A7ABCA58F32CA8F338C2D6E6FB16808E39737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-06-30_50a719e0d75e3c799e6fc7aa17b722e3_agent-tesla_amadey_avoslocker_cobalt-strike_darkgate_ele.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-30_50a719e0d75e3c799e6fc7aa17b722e3_agent-tesla_amadey_avoslocker_cobalt-strike_darkgate_ele.exe
Resource
win11ltsc2024-20260629-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_50a719e0d75e3c799e6fc7aa17b722e3_agent-tesla_amadey_avoslocker_cobalt-strike_darkgate_elex_glassworm_hawkeye_hijackloader_icedid_karagany_luca-stealer_lynx_njrat_play_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc
- Size 15.1MB
- SHA256 f5bff56a4c7cf6180a1e9582557ceb9f471ffb4f4660419ea4518b9924a188db
- MD5 50a719e0d75e3c799e6fc7aa17b722e3
- SHA1 d5a291688b480e485fc1f0ff2c0510d22ce77ccc
- SHA512 7336b21ab64a97d30c5ff1dfeb9fb67cfcbb0210cd09030a795ef12baee2c5c5938b026ea88233535a8a4f4b048c323315840bd2409439e7d0e34109220e492a
- SSDEEP 196608:+quFIF0wuPlCKrjRvzquFIF0wuPlCKrjRvC:foUm1eoUm1C
- TLSH T1B8F6AE1277D48035F5B31631897592255A7ABCA58F32CA8F338C2D6E6FB16808E39737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.