General
- Target 2026-07-01_ea3c7b27254407692529da323fb19dc7_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_rugmi_satacom_smoke-loader_stealc_tofsee
- Size 7.9MB
- Sample260701-wrsnvads71
- SHA256 402080efb8e7698a54eb4eb7d482826375e71904f1ab8ea29bf3281c18e8806e
- MD5 ea3c7b27254407692529da323fb19dc7
- SHA1 f36b34d1fbfa3c4717fd1d81f1347540dc148a4b
- SHA512 0b115635487a53584501c6cc0dab3442f5ac2c2083db0762c16e25650311057ed0f9265b9b2d7dbc83df2fc22a809c33ae25345a2b11f6fc4872f515b4728642
- SSDEEP 98304:gKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jR4TUxS7PLMLZ1opDbSVHrjh:gquFIF0wuPlCKrjRvqzMLZ7pjh
- TLSH T1FE86AE1273D44035F5B316319A3592656A7ABC659F32CA8F33C82D5E7FB16808A3A733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-01_ea3c7b27254407692529da323fb19dc7_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_ea3c7b27254407692529da323fb19dc7_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_ea3c7b27254407692529da323fb19dc7_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_rugmi_satacom_smoke-loader_stealc_tofsee
- Size 7.9MB
- SHA256 402080efb8e7698a54eb4eb7d482826375e71904f1ab8ea29bf3281c18e8806e
- MD5 ea3c7b27254407692529da323fb19dc7
- SHA1 f36b34d1fbfa3c4717fd1d81f1347540dc148a4b
- SHA512 0b115635487a53584501c6cc0dab3442f5ac2c2083db0762c16e25650311057ed0f9265b9b2d7dbc83df2fc22a809c33ae25345a2b11f6fc4872f515b4728642
- SSDEEP 98304:gKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jR4TUxS7PLMLZ1opDbSVHrjh:gquFIF0wuPlCKrjRvqzMLZ7pjh
- TLSH T1FE86AE1273D44035F5B316319A3592656A7ABC659F32CA8F33C82D5E7FB16808A3A733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.