General
- Target 2026-07-01_27864fb58c0228d78c46c4e39672d209_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc_stop
- Size 15.3MB
- Sample260701-mdc7kabv6q
- SHA256 4cab620a0a339dc8767954f4be4d895074a743c0e4b59974a8dc9098083e95bc
- MD5 27864fb58c0228d78c46c4e39672d209
- SHA1 ff5cc9d3897b73dfeea1ff75035a31e569669684
- SHA512 d9f214fc408074028d34bc6987219f1f9b93eee0ec8f5d4cbcbecd4a56a70a20cc98bdd8a9850d9b6a35c61f769a5c58da9a5e8d16f2de2db563b2d74961d4b3
- SSDEEP 196608:wPaquFIF0wuPlCKrjRP4PaquFIF0wuPlCKrjRP4PvLZ7pjK:YoUmyoUme7tK
- TLSH T150F6AE1273D84035F5B31632993592246A79BC659F32CA9F338C2D5E7FB06819A3A733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-01_27864fb58c0228d78c46c4e39672d209_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_27864fb58c0228d78c46c4e39672d209_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_27864fb58c0228d78c46c4e39672d209_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc_stop
- Size 15.3MB
- SHA256 4cab620a0a339dc8767954f4be4d895074a743c0e4b59974a8dc9098083e95bc
- MD5 27864fb58c0228d78c46c4e39672d209
- SHA1 ff5cc9d3897b73dfeea1ff75035a31e569669684
- SHA512 d9f214fc408074028d34bc6987219f1f9b93eee0ec8f5d4cbcbecd4a56a70a20cc98bdd8a9850d9b6a35c61f769a5c58da9a5e8d16f2de2db563b2d74961d4b3
- SSDEEP 196608:wPaquFIF0wuPlCKrjRP4PaquFIF0wuPlCKrjRP4PvLZ7pjK:YoUmyoUme7tK
- TLSH T150F6AE1273D84035F5B31632993592246A79BC659F32CA9F338C2D5E7FB06819A3A733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.