General
- Target 2026-07-01_3617fa8096ffa892d67afdaaa871f7f6_agent-tesla_amadey_blankgrabber_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_satacom_smoke-loader_stealc_stop_tofsee
- Size 7.3MB
- Sample260701-cacfracs6q
- SHA256 7efc2d4cee635b06ce0a0ff8acbed08a4cda4994f917fd5951cb22564ec33e46
- MD5 3617fa8096ffa892d67afdaaa871f7f6
- SHA1 005438ffc86bd0281ba7633ef29cc358355c4bf8
- SHA512 7b8b3f420502268d9efdb45312fcc530ff82259b33c3c9d1ac6c614ce6473465888e9ee5122e0dd84375b6c9b59743fad2c3536189f7179d0592777c5de1be3d
- SSDEEP 98304:Ir4KRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jR4TUDrj:a4quFIF0wuPlCKrjRVj
- TLSH T10D769D1273D48035F5B316318A3593A55B7ABCA58B32CA8F33882D5E6F716C09A39737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-01_3617fa8096ffa892d67afdaaa871f7f6_agent-tesla_amadey_blankgrabber_cobalt-strike_darkgate_g.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_3617fa8096ffa892d67afdaaa871f7f6_agent-tesla_amadey_blankgrabber_cobalt-strike_darkgate_g.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_3617fa8096ffa892d67afdaaa871f7f6_agent-tesla_amadey_blankgrabber_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_satacom_smoke-loader_stealc_stop_tofsee
- Size 7.3MB
- SHA256 7efc2d4cee635b06ce0a0ff8acbed08a4cda4994f917fd5951cb22564ec33e46
- MD5 3617fa8096ffa892d67afdaaa871f7f6
- SHA1 005438ffc86bd0281ba7633ef29cc358355c4bf8
- SHA512 7b8b3f420502268d9efdb45312fcc530ff82259b33c3c9d1ac6c614ce6473465888e9ee5122e0dd84375b6c9b59743fad2c3536189f7179d0592777c5de1be3d
- SSDEEP 98304:Ir4KRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jR4TUDrj:a4quFIF0wuPlCKrjRVj
- TLSH T10D769D1273D48035F5B316318A3593A55B7ABCA58B32CA8F33882D5E6F716C09A39737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.