General
- Target 2026-06-29_e9858ae6f6ace420ebcf47155a7be559_agent-tesla_amadey_blankgrabber_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rugmi_satacom_smoke-loader
- Size 7.9MB
- Sample260630-ccbbgact3s
- SHA256 76770360acd4ac579cbb823ec9f390ef15cac61d5d41761fe49a5d45a412fea7
- MD5 e9858ae6f6ace420ebcf47155a7be559
- SHA1 48adb03576f42edc561c9da5209963aae6b7b3af
- SHA512 1634f15f8a159fb21671010df02b34b1b458136c0bb2a7ef77d165a3fe6fd6f1c9abab8620caeba97dd001f7f1b59fd64fd96b74614b4537b045af4304cba3e2
- SSDEEP 98304:jfKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jR4TU+2LZ1opDbSVHrj+:LquFIF0wuPlCKrjRzLZ7pj
- TLSH T1C986AE1272D85475F5B31631993492246A39BCA58F32CA9F33883D5E7FB16809E3A733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-06-29_e9858ae6f6ace420ebcf47155a7be559_agent-tesla_amadey_blankgrabber_cobalt-strike_darkgate_g.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-29_e9858ae6f6ace420ebcf47155a7be559_agent-tesla_amadey_blankgrabber_cobalt-strike_darkgate_g.exe
Resource
win11ltsc2024-20260629-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-29_e9858ae6f6ace420ebcf47155a7be559_agent-tesla_amadey_blankgrabber_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rugmi_satacom_smoke-loader
- Size 7.9MB
- SHA256 76770360acd4ac579cbb823ec9f390ef15cac61d5d41761fe49a5d45a412fea7
- MD5 e9858ae6f6ace420ebcf47155a7be559
- SHA1 48adb03576f42edc561c9da5209963aae6b7b3af
- SHA512 1634f15f8a159fb21671010df02b34b1b458136c0bb2a7ef77d165a3fe6fd6f1c9abab8620caeba97dd001f7f1b59fd64fd96b74614b4537b045af4304cba3e2
- SSDEEP 98304:jfKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jR4TU+2LZ1opDbSVHrj+:LquFIF0wuPlCKrjRzLZ7pj
- TLSH T1C986AE1272D85475F5B31631993492246A39BCA58F32CA9F33883D5E7FB16809E3A733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.