General
- Target 2026-07-01_fb22ff017272cd5d620449c8681f4142_agent-tesla_amadey_avoslocker_cobalt-strike_darkgate_elex_glassworm_hawkeye_hijackloader_icedid_karagany_luca-stealer_lynx_njrat_play_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc_stop
- Size 22.3MB
- Sample260701-hvvqqaax2s
- SHA256 37077228b5d8c8ce38b27c79373a5af114fb07dd4fff44e491bde2db3a3310cd
- MD5 fb22ff017272cd5d620449c8681f4142
- SHA1 7078a13ac46643c74b2b4e80a93451c312844d9c
- SHA512 d0767ea6e08b1459d9d66b669c57eee536274a517c6dbc80e84539d0d7e5062a31628b22cf869ec2fe10e4cf2171c559c9cb68f86e9e44d1dbc8156be7204390
- SSDEEP 196608:M4quFIF0wuPlCKrjRc4quFIF0wuPlCKrjRc4quFIF0wuPlCKrjRcV:AoUmmoUmmoUms
- TLSH T173379D0277D85475F1B316318A3592655B3ABCA58B32CA8F33883D9E6F716809E39733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-01_fb22ff017272cd5d620449c8681f4142_agent-tesla_amadey_avoslocker_cobalt-strike_darkgate_ele.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_fb22ff017272cd5d620449c8681f4142_agent-tesla_amadey_avoslocker_cobalt-strike_darkgate_ele.exe
Resource
win11ltsc2024-20260629-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_fb22ff017272cd5d620449c8681f4142_agent-tesla_amadey_avoslocker_cobalt-strike_darkgate_elex_glassworm_hawkeye_hijackloader_icedid_karagany_luca-stealer_lynx_njrat_play_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc_stop
- Size 22.3MB
- SHA256 37077228b5d8c8ce38b27c79373a5af114fb07dd4fff44e491bde2db3a3310cd
- MD5 fb22ff017272cd5d620449c8681f4142
- SHA1 7078a13ac46643c74b2b4e80a93451c312844d9c
- SHA512 d0767ea6e08b1459d9d66b669c57eee536274a517c6dbc80e84539d0d7e5062a31628b22cf869ec2fe10e4cf2171c559c9cb68f86e9e44d1dbc8156be7204390
- SSDEEP 196608:M4quFIF0wuPlCKrjRc4quFIF0wuPlCKrjRc4quFIF0wuPlCKrjRcV:AoUmmoUmmoUms
- TLSH T173379D0277D85475F1B316318A3592655B3ABCA58B32CA8F33883D9E6F716809E39733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.