General
- Target 2026-07-01_8f48a5cad2f8bf83aaa1658e2c2fdc64_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rugmi_satacom_smoke-loader
- Size 14.2MB
- Sample260701-kycqesh13p
- SHA256 b78a48fd1b220744e39c4e8eb2e278d7933abb7582a8f169c1910340e8f6cbb7
- MD5 8f48a5cad2f8bf83aaa1658e2c2fdc64
- SHA1 0e1a001c1ff5255769706a7b2d4bb35674db245a
- SHA512 e4f1cc3bf2a9a78c29bea50b22739a471fabb921b0bde1c9a70476acca10dd93223818987bb4a63986281f6e55c85c59da8284808816dfdc8fb734523917d266
- SSDEEP 196608:OquFIF0wuPlCKrjR6fUSYquFIF0wuPlCKrjR6fUSh:voUmE3oUmEH
- TLSH T171E6AF1273D44035F5B316319A3592296A79BCA59F33CA9F328C2D5D7FB06808A3A737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-01_8f48a5cad2f8bf83aaa1658e2c2fdc64_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_8f48a5cad2f8bf83aaa1658e2c2fdc64_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_8f48a5cad2f8bf83aaa1658e2c2fdc64_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rugmi_satacom_smoke-loader
- Size 14.2MB
- SHA256 b78a48fd1b220744e39c4e8eb2e278d7933abb7582a8f169c1910340e8f6cbb7
- MD5 8f48a5cad2f8bf83aaa1658e2c2fdc64
- SHA1 0e1a001c1ff5255769706a7b2d4bb35674db245a
- SHA512 e4f1cc3bf2a9a78c29bea50b22739a471fabb921b0bde1c9a70476acca10dd93223818987bb4a63986281f6e55c85c59da8284808816dfdc8fb734523917d266
- SSDEEP 196608:OquFIF0wuPlCKrjR6fUSYquFIF0wuPlCKrjR6fUSh:voUmE3oUmEH
- TLSH T171E6AF1273D44035F5B316319A3592296A79BCA59F33CA9F328C2D5D7FB06808A3A737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.