General
- Target 2026-07-02_834b0e6150340bd7587d00a228fcfee8_agent-tesla_amadey_blankgrabber_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_satacom_smoke-loader_stealc_vidar
- Size 9.8MB
- Sample260702-dh2w2shy6m
- SHA256 fc5650a5ae0411a51699d4a58ae799211512ebce5179ef8b43341ff664cef214
- MD5 834b0e6150340bd7587d00a228fcfee8
- SHA1 0e4a084b653861927dbfe7b8fffc21768e495d87
- SHA512 fb714bd0c5f6509d2e3e9821806b93407e010d407fe0776bcdb6241ced68c117df66de86245a046ceefbf0492885e9b7f08532ed16969dabe1c0b1341409b194
- SSDEEP 98304:vBTKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jR4TUvyYB9KsW1+M5Nn:vJquFIF0wuPlCKrjRf/1yn
- TLSH T11BA68D0273D85575F1B316319A7592A45B3ABC614F32CA8F33882A5E6F716C09E3A733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-02_834b0e6150340bd7587d00a228fcfee8_agent-tesla_amadey_blankgrabber_cobalt-strike_darkgate_g.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_834b0e6150340bd7587d00a228fcfee8_agent-tesla_amadey_blankgrabber_cobalt-strike_darkgate_g.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_834b0e6150340bd7587d00a228fcfee8_agent-tesla_amadey_blankgrabber_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_satacom_smoke-loader_stealc_vidar
- Size 9.8MB
- SHA256 fc5650a5ae0411a51699d4a58ae799211512ebce5179ef8b43341ff664cef214
- MD5 834b0e6150340bd7587d00a228fcfee8
- SHA1 0e4a084b653861927dbfe7b8fffc21768e495d87
- SHA512 fb714bd0c5f6509d2e3e9821806b93407e010d407fe0776bcdb6241ced68c117df66de86245a046ceefbf0492885e9b7f08532ed16969dabe1c0b1341409b194
- SSDEEP 98304:vBTKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jR4TUvyYB9KsW1+M5Nn:vJquFIF0wuPlCKrjRf/1yn
- TLSH T11BA68D0273D85575F1B316319A7592A45B3ABC614F32CA8F33882A5E6F716C09E3A733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.