General
- Target 2026-06-29_fc8e5c964dca90d07ce5c35c5ede817e_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_satacom_smoke-loader_stealc_tofsee_wannacry
- Size 28.5MB
- Sample260630-a92htabt41
- SHA256 df64930abfbb2cf178414c8e435af18f7031fadab13964499225ef4ac8552ba9
- MD5 fc8e5c964dca90d07ce5c35c5ede817e
- SHA1 66b5beafd22e139687e2934eb512ec80de8899c3
- SHA512 2b0cef97032a2572989384f39f18e7567387363cb7326ddc2106252ed73793f01fa64504e2bba60382c49ea84fb345dd22b104bd0f6e15992993a6846608f415
- SSDEEP 196608:OquFIF0wuPlCKrjRnzgquFIF0wuPlCKrjRnzgquFIF0wuPlCKrjRnzgquFIF0wud:voUm7oUm7oUm7oUm
- TLSH T167679E1273D44035F5B316318A7592599A7ABCA58F33CA8F338C2D9E6F716808A39737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-06-29_fc8e5c964dca90d07ce5c35c5ede817e_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-29_fc8e5c964dca90d07ce5c35c5ede817e_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win11ltsc2024-20260629-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-29_fc8e5c964dca90d07ce5c35c5ede817e_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_satacom_smoke-loader_stealc_tofsee_wannacry
- Size 28.5MB
- SHA256 df64930abfbb2cf178414c8e435af18f7031fadab13964499225ef4ac8552ba9
- MD5 fc8e5c964dca90d07ce5c35c5ede817e
- SHA1 66b5beafd22e139687e2934eb512ec80de8899c3
- SHA512 2b0cef97032a2572989384f39f18e7567387363cb7326ddc2106252ed73793f01fa64504e2bba60382c49ea84fb345dd22b104bd0f6e15992993a6846608f415
- SSDEEP 196608:OquFIF0wuPlCKrjRnzgquFIF0wuPlCKrjRnzgquFIF0wuPlCKrjRnzgquFIF0wud:voUm7oUm7oUm7oUm
- TLSH T167679E1273D44035F5B316318A7592599A7ABCA58F33CA8F338C2D9E6F716808A39737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.