General
- Target 2026-06-29_b7f7f43fb80e428a9c6b513d9389c936_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_satacom_smoke-loader_stealc
- Size 14.3MB
- Sample260630-e3kc6sev9z
- SHA256 ccfa05a02a7d8b71436db63356effd6e9b3404212fd993d63ec483abf3f1297e
- MD5 b7f7f43fb80e428a9c6b513d9389c936
- SHA1 711debcf68e1eec4f46a0c72b7b2de2c8c60f754
- SHA512 3d23c64f94bbc4fc1b8872b123d31382b5a0ff4f38fb7f51a796479d1994f9a9d5e9e1ed3e6ff5ff47f0f4385116b50756dc5535234972cf0d05c40c2e022f21
- SSDEEP 196608:OquFIF0wuPlCKrjRfzlquFIF0wuPlCKrjRfzQ:voUmmoUmy
- TLSH T109E69E0273D84475F5B316318A759259567ABCA58F32CA8F338C2D5E6FB16808E3A733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-06-29_b7f7f43fb80e428a9c6b513d9389c936_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-29_b7f7f43fb80e428a9c6b513d9389c936_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win11ltsc2024-20260629-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-29_b7f7f43fb80e428a9c6b513d9389c936_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_satacom_smoke-loader_stealc
- Size 14.3MB
- SHA256 ccfa05a02a7d8b71436db63356effd6e9b3404212fd993d63ec483abf3f1297e
- MD5 b7f7f43fb80e428a9c6b513d9389c936
- SHA1 711debcf68e1eec4f46a0c72b7b2de2c8c60f754
- SHA512 3d23c64f94bbc4fc1b8872b123d31382b5a0ff4f38fb7f51a796479d1994f9a9d5e9e1ed3e6ff5ff47f0f4385116b50756dc5535234972cf0d05c40c2e022f21
- SSDEEP 196608:OquFIF0wuPlCKrjRfzlquFIF0wuPlCKrjRfzQ:voUmmoUmy
- TLSH T109E69E0273D84475F5B316318A759259567ABCA58F32CA8F338C2D5E6FB16808E3A733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.