General
- Target 2026-07-01_237eacf8cedfe78787c08fcff5ed2928_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_ryuk_satacom_smoke-loader_stealc_tofsee_wannacry
- Size 7.9MB
- Sample260701-me5cfabw3n
- SHA256 6cfd3ebbf2a95ff74959eb08fb0157820812d6a9534fbcd3f5bb91d14f18e5d6
- MD5 237eacf8cedfe78787c08fcff5ed2928
- SHA1 606bc7b5c5b686597f23670546eb0cbc6c5a41ec
- SHA512 76bd93835b457c2b7fa506d5f05c1355f2009c0be0c42d87a8adb29febf85bb51a396043618a66cd3993938123c43c1a50ffe36ca3eaf76481c5aecbeb8388e0
- SSDEEP 98304:W7PLgKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jR4TUC07PLN:+zgquFIF0wuPlCKrjRnz
- TLSH T19286AF1273D44075F5B312318A7592599A7ABC654F32CA8F338C2E9E6F716808E3A737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-01_237eacf8cedfe78787c08fcff5ed2928_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_237eacf8cedfe78787c08fcff5ed2928_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_237eacf8cedfe78787c08fcff5ed2928_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_ryuk_satacom_smoke-loader_stealc_tofsee_wannacry
- Size 7.9MB
- SHA256 6cfd3ebbf2a95ff74959eb08fb0157820812d6a9534fbcd3f5bb91d14f18e5d6
- MD5 237eacf8cedfe78787c08fcff5ed2928
- SHA1 606bc7b5c5b686597f23670546eb0cbc6c5a41ec
- SHA512 76bd93835b457c2b7fa506d5f05c1355f2009c0be0c42d87a8adb29febf85bb51a396043618a66cd3993938123c43c1a50ffe36ca3eaf76481c5aecbeb8388e0
- SSDEEP 98304:W7PLgKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jR4TUC07PLN:+zgquFIF0wuPlCKrjRnz
- TLSH T19286AF1273D44075F5B312318A7592599A7ABC654F32CA8F338C2E9E6F716808E3A737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.