General
- Target 2026-06-29_1c9e09065c8da0b2715bfa196516493c_agent-tesla_amadey_avoslocker_cobalt-strike_darkgate_elex_glassworm_hawkeye_hijackloader_icedid_karagany_luca-stealer_lynx_njrat_play_remcos_rhadamanthys_smoke-loader_stealc
- Size 15.0MB
- Sample260630-phm9faey9t
- SHA256 7a82d3894b24fbea6822158cac393ebe3818e1224a14b7df6797c0c9ed9681ed
- MD5 1c9e09065c8da0b2715bfa196516493c
- SHA1 36f9380bb79bf83940943a9a3a59284e6ec60d84
- SHA512 b0cdcf7b896c09029756729c1469cc2c4ac7ecf219978ad15bc9384650429629f1640d37b208f8848f968c5eb2fc553f954c4a9151a9f8c96dec52bdc0ab0679
- SSDEEP 196608:dzlquFIF0wuPlCKrjRfzlquFIF0wuPlCKrjRfzC:uoUmmoUm8
- TLSH T1F2F6AF0273D84475F5B71631897592199A7ABC658F32CA8F338C2D9E6F716808E3A733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-06-29_1c9e09065c8da0b2715bfa196516493c_agent-tesla_amadey_avoslocker_cobalt-strike_darkgate_ele.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-29_1c9e09065c8da0b2715bfa196516493c_agent-tesla_amadey_avoslocker_cobalt-strike_darkgate_ele.exe
Resource
win11ltsc2024-20260629-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-29_1c9e09065c8da0b2715bfa196516493c_agent-tesla_amadey_avoslocker_cobalt-strike_darkgate_elex_glassworm_hawkeye_hijackloader_icedid_karagany_luca-stealer_lynx_njrat_play_remcos_rhadamanthys_smoke-loader_stealc
- Size 15.0MB
- SHA256 7a82d3894b24fbea6822158cac393ebe3818e1224a14b7df6797c0c9ed9681ed
- MD5 1c9e09065c8da0b2715bfa196516493c
- SHA1 36f9380bb79bf83940943a9a3a59284e6ec60d84
- SHA512 b0cdcf7b896c09029756729c1469cc2c4ac7ecf219978ad15bc9384650429629f1640d37b208f8848f968c5eb2fc553f954c4a9151a9f8c96dec52bdc0ab0679
- SSDEEP 196608:dzlquFIF0wuPlCKrjRfzlquFIF0wuPlCKrjRfzC:uoUmmoUm8
- TLSH T1F2F6AF0273D84475F5B71631897592199A7ABC658F32CA8F338C2D9E6F716808E3A733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.