General
- Target 2026-06-30_e6b11b491674583488a69eb8fb9c7586_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_satacom_smoke-loader_stealc_tofsee_vidar
- Size 6.9MB
- Sample260630-wcb3jsd19w
- SHA256 60e9cad1e1cf3d613ac8a6020839367795810a438029eb601b5d2703c980e8a1
- MD5 e6b11b491674583488a69eb8fb9c7586
- SHA1 8c9a22fa6fa203774fc54961a305d2992e668bb2
- SHA512 ddb22778e9e3bf31df6405f654b672249e0dc262766c900a60c16cb1fe796851e818cc800295e4e10b8a0d9a3a22cc31490a8b99f5f1cd47122d158e433d7c5c
- SSDEEP 98304:OKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jR4TUxZlBw:OquFIF0wuPlCKrjRvlw
- TLSH T1E376AE0273D44035F5B31631997592295A3ABCA59E33CA9F328C2D5E7FB16808E3A737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-06-30_e6b11b491674583488a69eb8fb9c7586_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-30_e6b11b491674583488a69eb8fb9c7586_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win11ltsc2024-20260629-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_e6b11b491674583488a69eb8fb9c7586_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_satacom_smoke-loader_stealc_tofsee_vidar
- Size 6.9MB
- SHA256 60e9cad1e1cf3d613ac8a6020839367795810a438029eb601b5d2703c980e8a1
- MD5 e6b11b491674583488a69eb8fb9c7586
- SHA1 8c9a22fa6fa203774fc54961a305d2992e668bb2
- SHA512 ddb22778e9e3bf31df6405f654b672249e0dc262766c900a60c16cb1fe796851e818cc800295e4e10b8a0d9a3a22cc31490a8b99f5f1cd47122d158e433d7c5c
- SSDEEP 98304:OKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jR4TUxZlBw:OquFIF0wuPlCKrjRvlw
- TLSH T1E376AE0273D44035F5B31631997592295A3ABCA59E33CA9F328C2D5E7FB16808E3A737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.