General
- Target 2026-06-30_2b387e292d0fdf5ef15e23cbd1390d04_agent-tesla_amadey_blankgrabber_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_satacom_smoke-loader
- Size 8.5MB
- Sample260701-gl6aeshs6x
- SHA256 213b27686db7813956e599e51aa99f4034bc8d6c7ae4011c92c1bddb5d705863
- MD5 2b387e292d0fdf5ef15e23cbd1390d04
- SHA1 7dac9cdfcdc866e891d4e8bce8af15d926f6630e
- SHA512 00575e496ca75938e83d3952ac73cccef77991fe600cc9f06937818c989e395292a330bac4bc6be284a5e7afbf8ba5c328912c7571a5ca4735262df85ff32d70
- SSDEEP 98304:07PLPKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jR4TUl7PLMY:YzPquFIF0wuPlCKrjRnzj
- TLSH T1B896AF0273D45075F1B316318A759655A73ABC658B32CA8F33882D9E6F726809F3A733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-06-30_2b387e292d0fdf5ef15e23cbd1390d04_agent-tesla_amadey_blankgrabber_cobalt-strike_darkgate_g.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-30_2b387e292d0fdf5ef15e23cbd1390d04_agent-tesla_amadey_blankgrabber_cobalt-strike_darkgate_g.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_2b387e292d0fdf5ef15e23cbd1390d04_agent-tesla_amadey_blankgrabber_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_satacom_smoke-loader
- Size 8.5MB
- SHA256 213b27686db7813956e599e51aa99f4034bc8d6c7ae4011c92c1bddb5d705863
- MD5 2b387e292d0fdf5ef15e23cbd1390d04
- SHA1 7dac9cdfcdc866e891d4e8bce8af15d926f6630e
- SHA512 00575e496ca75938e83d3952ac73cccef77991fe600cc9f06937818c989e395292a330bac4bc6be284a5e7afbf8ba5c328912c7571a5ca4735262df85ff32d70
- SSDEEP 98304:07PLPKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jR4TUl7PLMY:YzPquFIF0wuPlCKrjRnzj
- TLSH T1B896AF0273D45075F1B316318A759655A73ABC658B32CA8F33882D9E6F726809F3A733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.