General
- Target 2026-06-30_f13601d7a4ef1ad187272d854404d603_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_smoke-loader_stealc
- Size 27.6MB
- Sample260701-ckp5laet31
- SHA256 5f3104355cb823c76a4fc20807272fe162edd47af1eb72d675ce34b56bf7f554
- MD5 f13601d7a4ef1ad187272d854404d603
- SHA1 340c946d8a4d8d7ae0ff59eaa1e6e7b429faed17
- SHA512 69a333979843287b3cf9b94595e79c8cee755fcc5d86b2fd46178117b2bd476b4cec2c28ad0c1b805256ba3356b2030b49334ddc54e5580d77d957ebfc57a74a
- SSDEEP 196608:fkpquFIF0wuPlCKrjRvkpquFIF0wuPlCKrjRvkpquFIF0wuPlCKrjRvkpquFIF0r:fkcoUm1kcoUm1kcoUm1kcoUm1kdyn
- TLSH T141579E1277D44035F5B31631997992295A7ABCA58F33CA9F32882D5E7FB0AC08A35733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-06-30_f13601d7a4ef1ad187272d854404d603_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-30_f13601d7a4ef1ad187272d854404d603_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_f13601d7a4ef1ad187272d854404d603_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_smoke-loader_stealc
- Size 27.6MB
- SHA256 5f3104355cb823c76a4fc20807272fe162edd47af1eb72d675ce34b56bf7f554
- MD5 f13601d7a4ef1ad187272d854404d603
- SHA1 340c946d8a4d8d7ae0ff59eaa1e6e7b429faed17
- SHA512 69a333979843287b3cf9b94595e79c8cee755fcc5d86b2fd46178117b2bd476b4cec2c28ad0c1b805256ba3356b2030b49334ddc54e5580d77d957ebfc57a74a
- SSDEEP 196608:fkpquFIF0wuPlCKrjRvkpquFIF0wuPlCKrjRvkpquFIF0wuPlCKrjRvkpquFIF0r:fkcoUm1kcoUm1kcoUm1kcoUm1kdyn
- TLSH T141579E1277D44035F5B31631997992295A7ABCA58F33CA9F32882D5E7FB0AC08A35733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.