General
- Target 2026-06-30_6970a1cbf342119aa50749c1cf1f660f_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_satacom_smoke-loader_stealc
- Size 18.0MB
- Sample260701-e6lemsgt5s
- SHA256 354f865b3ba842ede2782ff05dadfd20af29351654cf3a7389aa048e959107d5
- MD5 6970a1cbf342119aa50749c1cf1f660f
- SHA1 3909c25d793910d4552ac5a09cb52bf71fe719ae
- SHA512 3fe55800f22e97afcb0596c01b659422d6c2786c8ff0d2dfe46b202d96025ddff38934d8badbeebc5b6c6c77d76caaa4c7b1856f912501240888a28f8aab903d
- SSDEEP 196608:gquFIF0wuPlCKrjRvSquFIF0wuPlCK8quFIF0wuPlCKrjRv+:5oUm1LoUqoUm1+
- TLSH T11C179E1277D44035F5B316318A7592295A79BCA58A33CA9F338C2D9E6FB16C08E39733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-06-30_6970a1cbf342119aa50749c1cf1f660f_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-30_6970a1cbf342119aa50749c1cf1f660f_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_6970a1cbf342119aa50749c1cf1f660f_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_satacom_smoke-loader_stealc
- Size 18.0MB
- SHA256 354f865b3ba842ede2782ff05dadfd20af29351654cf3a7389aa048e959107d5
- MD5 6970a1cbf342119aa50749c1cf1f660f
- SHA1 3909c25d793910d4552ac5a09cb52bf71fe719ae
- SHA512 3fe55800f22e97afcb0596c01b659422d6c2786c8ff0d2dfe46b202d96025ddff38934d8badbeebc5b6c6c77d76caaa4c7b1856f912501240888a28f8aab903d
- SSDEEP 196608:gquFIF0wuPlCKrjRvSquFIF0wuPlCK8quFIF0wuPlCKrjRv+:5oUm1LoUqoUm1+
- TLSH T11C179E1277D44035F5B316318A7592295A79BCA58A33CA9F338C2D9E6FB16C08E39733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.