General
- Target 2026-06-29_944908705da2bf437145146f20911e02_agent-tesla_amadey_blankgrabber_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_satacom_smoke-loader_stealc
- Size 16.6MB
- Sample260630-g2tlkagy3p
- SHA256 9c8745152e7196857f98e025e3c148183c7012293e838da3ec23d477f0f6b408
- MD5 944908705da2bf437145146f20911e02
- SHA1 ad653b838a606adfbfcdb1a51fd2b48541c135cb
- SHA512 d4067d0b0e7034007835b9158bf5e0b32480a173e0eff90f8170773b77e6f90a8a45909d56f13169c75c9939abbebf74491882cc12a0570709cdc1099437eb19
- SSDEEP 196608:2NOuquFIF0wuPlCKrjRMNOuquFIF0wuPlCKrjRMNO:2SoUm+SoUm+
- TLSH T103079E0272DC68B5F1B316318B3592A55B39FC654B22C98F33883E5D6F71681BA29733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-06-29_944908705da2bf437145146f20911e02_agent-tesla_amadey_blankgrabber_cobalt-strike_darkgate_g.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-29_944908705da2bf437145146f20911e02_agent-tesla_amadey_blankgrabber_cobalt-strike_darkgate_g.exe
Resource
win11ltsc2024-20260629-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-29_944908705da2bf437145146f20911e02_agent-tesla_amadey_blankgrabber_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_satacom_smoke-loader_stealc
- Size 16.6MB
- SHA256 9c8745152e7196857f98e025e3c148183c7012293e838da3ec23d477f0f6b408
- MD5 944908705da2bf437145146f20911e02
- SHA1 ad653b838a606adfbfcdb1a51fd2b48541c135cb
- SHA512 d4067d0b0e7034007835b9158bf5e0b32480a173e0eff90f8170773b77e6f90a8a45909d56f13169c75c9939abbebf74491882cc12a0570709cdc1099437eb19
- SSDEEP 196608:2NOuquFIF0wuPlCKrjRMNOuquFIF0wuPlCKrjRMNO:2SoUm+SoUm+
- TLSH T103079E0272DC68B5F1B316318B3592A55B39FC654B22C98F33883E5D6F71681BA29733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.