General
- Target 2026-07-01_0914144ea85ec8cdc3cd96278cd7fafb_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_smoke-loader_stop
- Size 27.7MB
- Sample260702-avqsrsav5s
- SHA256 7102c3b6cf6d5414eb56a1962ecafca664d02be9d146b74ecb0b0966e0320470
- MD5 0914144ea85ec8cdc3cd96278cd7fafb
- SHA1 f0ec53dae67789e738595c78f3944165a70e75a0
- SHA512 7b70901c3d62138616cd1f2edcdad81f9be422a7faeb587ad54fc5ea9973fbdf83cb8034d12f7dc15142bd5e82ccb1d3c9249b13eccd882a2fd7cec12cf59fb3
- SSDEEP 196608:fQTOy2quFIF0wuPlCKrjRvQTOy2quFIF0wuPlCKrjRvQTOy2quFIF0wuPlCKrjRM:fQLoUm1QLoUm1QLoUm1QIyn
- TLSH T134579E0272DC68B5F1B316319A758265563ABC644F32CA8F32883E5D6F716C1AE39733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-01_0914144ea85ec8cdc3cd96278cd7fafb_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_0914144ea85ec8cdc3cd96278cd7fafb_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_0914144ea85ec8cdc3cd96278cd7fafb_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_smoke-loader_stop
- Size 27.7MB
- SHA256 7102c3b6cf6d5414eb56a1962ecafca664d02be9d146b74ecb0b0966e0320470
- MD5 0914144ea85ec8cdc3cd96278cd7fafb
- SHA1 f0ec53dae67789e738595c78f3944165a70e75a0
- SHA512 7b70901c3d62138616cd1f2edcdad81f9be422a7faeb587ad54fc5ea9973fbdf83cb8034d12f7dc15142bd5e82ccb1d3c9249b13eccd882a2fd7cec12cf59fb3
- SSDEEP 196608:fQTOy2quFIF0wuPlCKrjRvQTOy2quFIF0wuPlCKrjRvQTOy2quFIF0wuPlCKrjRM:fQLoUm1QLoUm1QLoUm1QIyn
- TLSH T134579E0272DC68B5F1B316319A758265563ABC644F32CA8F32883E5D6F716C1AE39733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.