General
- Target 2026-07-01_a58ebbeba641d124fbfc9b0a2717e109_agent-tesla_amadey_blankgrabber_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_satacom_smoke-loader_stealc
- Size 22.4MB
- Sample260701-xeb11aet6t
- SHA256 d052bfcc64e381e833e4fad57ed00d38ff016caa49e3aea676e9565c2c9e64d6
- MD5 a58ebbeba641d124fbfc9b0a2717e109
- SHA1 6ccc3071f2a963d29e77815cd786841be5089cb9
- SHA512 69a504792049e702fe440eba9b194dd25839cfc7802cc74f9c941f78469d708e4c8ab972f9b05fbc02b163005aa19e60f52891bc505d9a5c5dbbbe38cf6fcefe
- SSDEEP 196608:RquFIF0wuPlCKrjRdquFIF0wuPlCKrjRhquFIF0wuPlCKrjR:UoUmSoUm+oUm
- TLSH T1FD379E0273D85475F5B316318A359269563ABCA58F32CA8F33883D5E6FB16809E39733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-01_a58ebbeba641d124fbfc9b0a2717e109_agent-tesla_amadey_blankgrabber_cobalt-strike_darkgate_g.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_a58ebbeba641d124fbfc9b0a2717e109_agent-tesla_amadey_blankgrabber_cobalt-strike_darkgate_g.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_a58ebbeba641d124fbfc9b0a2717e109_agent-tesla_amadey_blankgrabber_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_satacom_smoke-loader_stealc
- Size 22.4MB
- SHA256 d052bfcc64e381e833e4fad57ed00d38ff016caa49e3aea676e9565c2c9e64d6
- MD5 a58ebbeba641d124fbfc9b0a2717e109
- SHA1 6ccc3071f2a963d29e77815cd786841be5089cb9
- SHA512 69a504792049e702fe440eba9b194dd25839cfc7802cc74f9c941f78469d708e4c8ab972f9b05fbc02b163005aa19e60f52891bc505d9a5c5dbbbe38cf6fcefe
- SSDEEP 196608:RquFIF0wuPlCKrjRdquFIF0wuPlCKrjRhquFIF0wuPlCKrjR:UoUmSoUm+oUm
- TLSH T1FD379E0273D85475F5B316318A359269563ABCA58F32CA8F33883D5E6FB16809E39733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.