General
- Target 2026-06-30_b94d99c3ecd14a013e93bbed06e973af_agent-tesla_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_rugmi_smoke-loader_stealc_stop_vidar
- Size 11.3MB
- Sample260630-xtrd8sd18m
- SHA256 744326dd58ddd7bb63ee66945f66852c70dc71bc77a47bd3f1909594a2db5cc4
- MD5 b94d99c3ecd14a013e93bbed06e973af
- SHA1 63136915734f6394a6b1d1bcb0d3c7b4c8552e61
- SHA512 2184d79e9b3604c2c5f5b5c3c9977ec048571b4deb53b0ee2a691eea32550f39682309b25a004ce12ec134043960408d21153068a349a602c9bfab49fd852771
- SSDEEP 196608:PnTLZ7pjFTObquFIF0wuPlCKrjRQ0LZ7pjinTLZ7pjFTOA:h7tFVoUmf7tQ7tF1
- TLSH T13DC6AD1272D89471F1B201329B3592A56A3DBC645B22C98F73C83E5E7F71581BA3A733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-06-30_b94d99c3ecd14a013e93bbed06e973af_agent-tesla_amadey_cobalt-strike_darkgate_elex_glassworm.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-30_b94d99c3ecd14a013e93bbed06e973af_agent-tesla_amadey_cobalt-strike_darkgate_elex_glassworm.exe
Resource
win11ltsc2024-20260630-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_b94d99c3ecd14a013e93bbed06e973af_agent-tesla_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_rugmi_smoke-loader_stealc_stop_vidar
- Size 11.3MB
- SHA256 744326dd58ddd7bb63ee66945f66852c70dc71bc77a47bd3f1909594a2db5cc4
- MD5 b94d99c3ecd14a013e93bbed06e973af
- SHA1 63136915734f6394a6b1d1bcb0d3c7b4c8552e61
- SHA512 2184d79e9b3604c2c5f5b5c3c9977ec048571b4deb53b0ee2a691eea32550f39682309b25a004ce12ec134043960408d21153068a349a602c9bfab49fd852771
- SSDEEP 196608:PnTLZ7pjFTObquFIF0wuPlCKrjRQ0LZ7pjinTLZ7pjFTOA:h7tFVoUmf7tQ7tF1
- TLSH T13DC6AD1272D89471F1B201329B3592A56A3DBC645B22C98F73C83E5E7F71581BA3A733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.