General
- Target 2026-06-30_37f067790729ecd70f7aa456cdc8bb53_agent-tesla_amadey_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rugmi_smoke-loader
- Size 7.9MB
- Sample260630-3fca2sh14l
- SHA256 7df31ee4e22c07052afc9c656be9d97e6801c6fa0bc6d0ac50a786269f2ba905
- MD5 37f067790729ecd70f7aa456cdc8bb53
- SHA1 fbab66969de4a149dc52e90b1f08b4a95fa24843
- SHA512 61ac11ba434dd85060cf74b73c337928ea0f73ea1cae5488a19c87e5005f18746f649dffeb3c8d32474b05ebf30d968b9c123700c48f9cafab6fe9c3c199765e
- SSDEEP 98304:OKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jR4TUl7PLMLZ1opDbSVHrjK:OquFIF0wuPlCKrjRnzMLZ7pjK
- TLSH T14586AE1273D44075F5B316319A359265AA3ABC658F32CA9F328C2D5E7F716808E3A733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-06-30_37f067790729ecd70f7aa456cdc8bb53_agent-tesla_amadey_darkgate_glassworm_hawkeye_hijackload.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-30_37f067790729ecd70f7aa456cdc8bb53_agent-tesla_amadey_darkgate_glassworm_hawkeye_hijackload.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_37f067790729ecd70f7aa456cdc8bb53_agent-tesla_amadey_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rugmi_smoke-loader
- Size 7.9MB
- SHA256 7df31ee4e22c07052afc9c656be9d97e6801c6fa0bc6d0ac50a786269f2ba905
- MD5 37f067790729ecd70f7aa456cdc8bb53
- SHA1 fbab66969de4a149dc52e90b1f08b4a95fa24843
- SHA512 61ac11ba434dd85060cf74b73c337928ea0f73ea1cae5488a19c87e5005f18746f649dffeb3c8d32474b05ebf30d968b9c123700c48f9cafab6fe9c3c199765e
- SSDEEP 98304:OKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jR4TUl7PLMLZ1opDbSVHrjK:OquFIF0wuPlCKrjRnzMLZ7pjK
- TLSH T14586AE1273D44075F5B316319A359265AA3ABC658F32CA9F328C2D5E7F716808E3A733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.