General
- Target 2026-06-29_e991998d3013da5577a38865ccfd5946_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_satacom_smoke-loader_stealc_vidar
- Size 11.8MB
- Sample260630-cb7chsc13m
- SHA256 b76d1ddcdc34633b5a497b9b915cc541e39c1b23d788a1e6d9811559c780d942
- MD5 e991998d3013da5577a38865ccfd5946
- SHA1 ac33f56a174577f63c903f12665a5984c5f635db
- SHA512 7aba532af6b90fafbdd7677e89d6a175c39edc514c5e1542d62c1693c1e5820dc34334ea8668d67dc60f99c8051061ae7736007c4a0edfd07e65d9014617decc
- SSDEEP 98304:OKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xFKRuy5a/OU/jIEeQfoR/IuOFVjJ:OquFIF0wuPlCK8quFIF0wuPlCKrjRX
- TLSH T133C69E0277D44071F5B316318A7592695679BC658A33CA9F338C2D9EAFB16C08E3A733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-06-29_e991998d3013da5577a38865ccfd5946_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-29_e991998d3013da5577a38865ccfd5946_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win11ltsc2024-20260629-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-29_e991998d3013da5577a38865ccfd5946_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_satacom_smoke-loader_stealc_vidar
- Size 11.8MB
- SHA256 b76d1ddcdc34633b5a497b9b915cc541e39c1b23d788a1e6d9811559c780d942
- MD5 e991998d3013da5577a38865ccfd5946
- SHA1 ac33f56a174577f63c903f12665a5984c5f635db
- SHA512 7aba532af6b90fafbdd7677e89d6a175c39edc514c5e1542d62c1693c1e5820dc34334ea8668d67dc60f99c8051061ae7736007c4a0edfd07e65d9014617decc
- SSDEEP 98304:OKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xFKRuy5a/OU/jIEeQfoR/IuOFVjJ:OquFIF0wuPlCK8quFIF0wuPlCKrjRX
- TLSH T133C69E0277D44071F5B316318A7592695679BC658A33CA9F338C2D9EAFB16C08E3A733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.