General
- Target 2026-07-01_dabe1099e90d6f29afe9f3478583980b_agent-tesla_amadey_cobalt-strike_coinminer_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_rugmi_satacom_smoke-loader_stealc_tofsee
- Size 7.7MB
- Sample260701-h9l25aa121
- SHA256 80e3374ac2fab2a91a471f0367cb4f5b9b095806e8b9ad156807a3eba51dceba
- MD5 dabe1099e90d6f29afe9f3478583980b
- SHA1 284e2542cc63e4865a484c7257619130c8d71993
- SHA512 c7bb18382e2cda881624b33a84420da181773b16a2673643b3e60a701c13212a800efe4e1ff6be0617e40ac0822814a936e6bf901435c1b1b8b2512a77e4eb3d
- SSDEEP 98304:gKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jR4TUlmLZ1opDbSVHrj2t:gquFIF0wuPlCKrjRGLZ7pje
- TLSH T1BC86AE1273D84075F5B31631993592256A39BCA59F32CA9F33882D5E7FB16C08A3A733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-01_dabe1099e90d6f29afe9f3478583980b_agent-tesla_amadey_cobalt-strike_coinminer_darkgate_glas.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_dabe1099e90d6f29afe9f3478583980b_agent-tesla_amadey_cobalt-strike_coinminer_darkgate_glas.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_dabe1099e90d6f29afe9f3478583980b_agent-tesla_amadey_cobalt-strike_coinminer_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_rugmi_satacom_smoke-loader_stealc_tofsee
- Size 7.7MB
- SHA256 80e3374ac2fab2a91a471f0367cb4f5b9b095806e8b9ad156807a3eba51dceba
- MD5 dabe1099e90d6f29afe9f3478583980b
- SHA1 284e2542cc63e4865a484c7257619130c8d71993
- SHA512 c7bb18382e2cda881624b33a84420da181773b16a2673643b3e60a701c13212a800efe4e1ff6be0617e40ac0822814a936e6bf901435c1b1b8b2512a77e4eb3d
- SSDEEP 98304:gKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jR4TUlmLZ1opDbSVHrj2t:gquFIF0wuPlCKrjRGLZ7pje
- TLSH T1BC86AE1273D84075F5B31631993592256A39BCA59F32CA9F33882D5E7FB16C08A3A733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.