General
- Target 2026-06-29_ab8e3490de58c507a07c7447811802e2_agent-tesla_amadey_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_wannacry
- Size 6.5MB
- Sample260630-fsfgxae13t
- SHA256 0d98fd4492b6c4a0eb97ae466754b1832557e666aa4931a04d60e27a56d25cc8
- MD5 ab8e3490de58c507a07c7447811802e2
- SHA1 96b181445ec3785053ef008e4728c0cfbc32b3d6
- SHA512 79b1dff9d0eac39631607784eeb31574840fd68a458d50feb492f1dc5fb6eb1b4d181dce5a96e346fdef88250d97facb1d60496b1633c78039e39125563387d2
- SSDEEP 98304:OKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jR4TUxKK:OquFIF0wuPlCKrjRv9
- TLSH T16A66AE1273D44035F5B3163199799229567ABCA58E33CA9F328C2D9E7FB16808E39733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-06-29_ab8e3490de58c507a07c7447811802e2_agent-tesla_amadey_darkgate_glassworm_hawkeye_hijackload.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-29_ab8e3490de58c507a07c7447811802e2_agent-tesla_amadey_darkgate_glassworm_hawkeye_hijackload.exe
Resource
win11ltsc2024-20260629-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-29_ab8e3490de58c507a07c7447811802e2_agent-tesla_amadey_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_wannacry
- Size 6.5MB
- SHA256 0d98fd4492b6c4a0eb97ae466754b1832557e666aa4931a04d60e27a56d25cc8
- MD5 ab8e3490de58c507a07c7447811802e2
- SHA1 96b181445ec3785053ef008e4728c0cfbc32b3d6
- SHA512 79b1dff9d0eac39631607784eeb31574840fd68a458d50feb492f1dc5fb6eb1b4d181dce5a96e346fdef88250d97facb1d60496b1633c78039e39125563387d2
- SSDEEP 98304:OKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jR4TUxKK:OquFIF0wuPlCKrjRv9
- TLSH T16A66AE1273D44035F5B3163199799229567ABCA58E33CA9F328C2D9E7FB16808E39733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.