General
- Target 2026-07-02_52f2237bf96ff70d5e1a5745a0cbd891_agent-tesla_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 7.1MB
- Sample260702-g5e8cabs7l
- SHA256 debdc5e5fcf78e09c777b6af59e25f0e5898f861ebd4d62123f782c925387e71
- MD5 52f2237bf96ff70d5e1a5745a0cbd891
- SHA1 9890847a0298ef5d0acb9c8d621e912ea9aec19c
- SHA512 bbc93ed21ae31764f229a21de783f9ce31f5b7269fd2a46d9945f95d22d7f22aa79dd74a988ac734694b83f1ebc8f53c3487c886d6a9222df533d4c4022a6e45
- SSDEEP 98304:KJWKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jR4TULsIyTJN:KJWquFIF0wuPlCKrjRuJ
- TLSH T13D769E1273D89475F1B31631893592695A3ABCA58F32CA8F338C2D5E6F706C09A39737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-02_52f2237bf96ff70d5e1a5745a0cbd891_agent-tesla_amadey_cobalt-strike_darkgate_elex_glassworm.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_52f2237bf96ff70d5e1a5745a0cbd891_agent-tesla_amadey_cobalt-strike_darkgate_elex_glassworm.exe
Resource
win11ltsc2024-20260629-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_52f2237bf96ff70d5e1a5745a0cbd891_agent-tesla_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 7.1MB
- SHA256 debdc5e5fcf78e09c777b6af59e25f0e5898f861ebd4d62123f782c925387e71
- MD5 52f2237bf96ff70d5e1a5745a0cbd891
- SHA1 9890847a0298ef5d0acb9c8d621e912ea9aec19c
- SHA512 bbc93ed21ae31764f229a21de783f9ce31f5b7269fd2a46d9945f95d22d7f22aa79dd74a988ac734694b83f1ebc8f53c3487c886d6a9222df533d4c4022a6e45
- SSDEEP 98304:KJWKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jR4TULsIyTJN:KJWquFIF0wuPlCKrjRuJ
- TLSH T13D769E1273D89475F1B31631893592695A3ABCA58F32CA8F338C2D5E6F706C09A39737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.