General
- Target 2026-06-30_0b4630ba8a6d8e4fa6363b6239f4c5ed_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_satacom_smoke-loader_stealc_wannacry
- Size 13.5MB
- Sample260701-a7yn5sdt9v
- SHA256 58c565b8a0557527a0a7dfb883f8ab1b854c8ac24d8721d02e807505b7c9c25a
- MD5 0b4630ba8a6d8e4fa6363b6239f4c5ed
- SHA1 682d76378b4ea3f786d27244c60e933a980119c3
- SHA512 ba13639e4c433f60950c7712d274b1a8ca8ed2d402bb63c7b3ee27a110a49a22e4a74c1494cbd7a5785c25eb0f1c75cc1cd0c1ab6b4bfdf2d33edd3a2d26fb8a
- SSDEEP 196608:toquFIF0wuPlCKrjReoquFIF0wuPlCKrjRe:tRoUm8RoUm8
- TLSH T152E69E0273D84435F5B31631897592295A7ABCA58E33CA9F338C2D5E6FB16808E39737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-06-30_0b4630ba8a6d8e4fa6363b6239f4c5ed_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-30_0b4630ba8a6d8e4fa6363b6239f4c5ed_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_0b4630ba8a6d8e4fa6363b6239f4c5ed_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_satacom_smoke-loader_stealc_wannacry
- Size 13.5MB
- SHA256 58c565b8a0557527a0a7dfb883f8ab1b854c8ac24d8721d02e807505b7c9c25a
- MD5 0b4630ba8a6d8e4fa6363b6239f4c5ed
- SHA1 682d76378b4ea3f786d27244c60e933a980119c3
- SHA512 ba13639e4c433f60950c7712d274b1a8ca8ed2d402bb63c7b3ee27a110a49a22e4a74c1494cbd7a5785c25eb0f1c75cc1cd0c1ab6b4bfdf2d33edd3a2d26fb8a
- SSDEEP 196608:toquFIF0wuPlCKrjReoquFIF0wuPlCKrjRe:tRoUm8RoUm8
- TLSH T152E69E0273D84435F5B31631897592295A7ABCA58E33CA9F338C2D5E6FB16808E39737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.