General
- Target 2026-07-01_01acc1f82295263d1eef37e2e7bf24a7_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_smoke-loader_stealc
- Size 14.8MB
- Sample260702-a1trlsgz6j
- SHA256 5347d94aff704b266076eed849d9417517be324a7d5c204ca232c75722a0d21e
- MD5 01acc1f82295263d1eef37e2e7bf24a7
- SHA1 c2992c0c66a0fa937814d3c5506d6c736cf3c777
- SHA512 dd64c0031b0076d961c7660c63290fdd8101df2e8b962d41faea1e425342cdf1ae2e5fb5f38b21374f62cf2f648e941dc5d8410b2b197f0b1fcaa2f5a2da090d
- SSDEEP 196608:fFquFIF0wuPlCKrjRvFquFIF0wuPlCKrjRvL1yn:fwoUm1woUm1Ryn
- TLSH T18BF69E1273D84535F5B31631997992245A7ABCA58F32CA8F32882D5E7FB1AC08E35733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-01_01acc1f82295263d1eef37e2e7bf24a7_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_01acc1f82295263d1eef37e2e7bf24a7_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_01acc1f82295263d1eef37e2e7bf24a7_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_smoke-loader_stealc
- Size 14.8MB
- SHA256 5347d94aff704b266076eed849d9417517be324a7d5c204ca232c75722a0d21e
- MD5 01acc1f82295263d1eef37e2e7bf24a7
- SHA1 c2992c0c66a0fa937814d3c5506d6c736cf3c777
- SHA512 dd64c0031b0076d961c7660c63290fdd8101df2e8b962d41faea1e425342cdf1ae2e5fb5f38b21374f62cf2f648e941dc5d8410b2b197f0b1fcaa2f5a2da090d
- SSDEEP 196608:fFquFIF0wuPlCKrjRvFquFIF0wuPlCKrjRvL1yn:fwoUm1woUm1Ryn
- TLSH T18BF69E1273D84535F5B31631997992245A7ABCA58F32CA8F32882D5E7FB1AC08E35733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.