General
- Target 2026-07-02_47769cf6bc8b9f1bcad30c8a9dcba4d2_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_smoke-loader_stop_wannacry
- Size 19.6MB
- Sample260702-g6w79abv2j
- SHA256 7fc2b32156e3ec6f7ce5e329b4a7a94b5a8e97838ec6678177cf0584d14d639b
- MD5 47769cf6bc8b9f1bcad30c8a9dcba4d2
- SHA1 ed04b944baeba34b9eebec2a457e577452aa1659
- SHA512 975517936980e6ed8faa133db4297b0df4af08e918144fe2e3d056ed5c00aaf476f363e78291cd3d11d307f6f42a14af176d6155793531592533cd0703aa04d5
- SSDEEP 196608:fQTObTquFIF0wuPlCKrjRvQTObTquFIF0wuPlCKrjRvQTOb91yn:fQZoUm1QZoUm1Qqyn
- TLSH T102279E0272D868B5F0B316319A7582A5573ABC654F32CA8F32883E5D6F716C1AE35733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-02_47769cf6bc8b9f1bcad30c8a9dcba4d2_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_47769cf6bc8b9f1bcad30c8a9dcba4d2_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_47769cf6bc8b9f1bcad30c8a9dcba4d2_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_smoke-loader_stop_wannacry
- Size 19.6MB
- SHA256 7fc2b32156e3ec6f7ce5e329b4a7a94b5a8e97838ec6678177cf0584d14d639b
- MD5 47769cf6bc8b9f1bcad30c8a9dcba4d2
- SHA1 ed04b944baeba34b9eebec2a457e577452aa1659
- SHA512 975517936980e6ed8faa133db4297b0df4af08e918144fe2e3d056ed5c00aaf476f363e78291cd3d11d307f6f42a14af176d6155793531592533cd0703aa04d5
- SSDEEP 196608:fQTObTquFIF0wuPlCKrjRvQTObTquFIF0wuPlCKrjRvQTOb91yn:fQZoUm1QZoUm1Qqyn
- TLSH T102279E0272D868B5F0B316319A7582A5573ABC654F32CA8F32883E5D6F716C1AE35733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.