General
- Target 2026-07-01_24cea69b3f04ef6c3e5f0927d496683e_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_satacom_smoke-loader_stealc_stop_tofsee_vidar_wannacry
- Size 7.9MB
- Sample260701-s2mnssht6m
- SHA256 345ed2df2c0ccccae8326d6116b02a7c271c301e02074bd0c025255ba6aff67d
- MD5 24cea69b3f04ef6c3e5f0927d496683e
- SHA1 37e44daa916e2948073ba266c986c2fc2d623e28
- SHA512 03cbbd460750ef6d273aed2e8cea064807355b65d204342dee4dfcdb451c943292a1a330d39a872ba579c6aafaeb2910f829dfed4bca4ca421e82eb8ee0f0261
- SSDEEP 98304:OKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jR4TUV5nmxB6TOh:OquFIF0wuPlCKrjRdmxsTO
- TLSH T17C86AE0273D85875F5B312318A3592655A39BCA54E32CA8F33883E5E7F71681AE39733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-01_24cea69b3f04ef6c3e5f0927d496683e_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_24cea69b3f04ef6c3e5f0927d496683e_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_24cea69b3f04ef6c3e5f0927d496683e_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_satacom_smoke-loader_stealc_stop_tofsee_vidar_wannacry
- Size 7.9MB
- SHA256 345ed2df2c0ccccae8326d6116b02a7c271c301e02074bd0c025255ba6aff67d
- MD5 24cea69b3f04ef6c3e5f0927d496683e
- SHA1 37e44daa916e2948073ba266c986c2fc2d623e28
- SHA512 03cbbd460750ef6d273aed2e8cea064807355b65d204342dee4dfcdb451c943292a1a330d39a872ba579c6aafaeb2910f829dfed4bca4ca421e82eb8ee0f0261
- SSDEEP 98304:OKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jR4TUV5nmxB6TOh:OquFIF0wuPlCKrjRdmxsTO
- TLSH T17C86AE0273D85875F5B312318A3592655A39BCA54E32CA8F33883E5E7F71681AE39733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.