General
- Target 2026-07-01_741254f86bc4dcee71d49a88cd4dac23_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_ryuk_satacom_smoke-loader_stop
- Size 7.4MB
- Sample260701-qqv5pahs9v
- SHA256 7f36ad0ebc93190a194927faa3e9abba8636c0e1048e48392db7416e3c518411
- MD5 741254f86bc4dcee71d49a88cd4dac23
- SHA1 11eea6d60e891c938a2fc87db499d1f623c6f68d
- SHA512 ee8c6710a9756655527623a29cdad075732f50c88ee13817bdf4f8122a7d37b4556653e68bcfb4ce065ab20789e8d640b68530b624df229749a8cb8af4025b1b
- SSDEEP 98304:W7PLVKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jR4TUL3V7PLu:+zVquFIF0wuPlCKrjRBFz
- TLSH T1E976AE1273D44475F5B316318A3592199A7ABC658F32CA8F338C2D9E6F716808B3A737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-01_741254f86bc4dcee71d49a88cd4dac23_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_741254f86bc4dcee71d49a88cd4dac23_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_741254f86bc4dcee71d49a88cd4dac23_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_ryuk_satacom_smoke-loader_stop
- Size 7.4MB
- SHA256 7f36ad0ebc93190a194927faa3e9abba8636c0e1048e48392db7416e3c518411
- MD5 741254f86bc4dcee71d49a88cd4dac23
- SHA1 11eea6d60e891c938a2fc87db499d1f623c6f68d
- SHA512 ee8c6710a9756655527623a29cdad075732f50c88ee13817bdf4f8122a7d37b4556653e68bcfb4ce065ab20789e8d640b68530b624df229749a8cb8af4025b1b
- SSDEEP 98304:W7PLVKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jR4TUL3V7PLu:+zVquFIF0wuPlCKrjRBFz
- TLSH T1E976AE1273D44475F5B316318A3592199A7ABC658F32CA8F338C2D9E6F716808B3A737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.