General
- Target 2026-07-02_44e7172f914158ce118c223c98f760b4_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_satacom_smoke-loader_stealc_stop_tofsee
- Size 13.5MB
- Sample260702-g7dgjacz71
- SHA256 4d02a8a48813d63f58426dc77cea115b7ff577f8e344d4a9a0f1fe609a397df4
- MD5 44e7172f914158ce118c223c98f760b4
- SHA1 c5350bceb26308e72e96a4a67dd0abfa397b985e
- SHA512 cffcc04630adfdbb0e79c52ab6f1e46690c769c03ad0d7d7c90781a2f8b1db7d31db9de531df70cd7c7110187e419a912a12580cfa4317c193ef518246a3b7f0
- SSDEEP 196608:OquFIF0wuPlCKrjRuJWquFIF0wuPlCKrjRuJ:voUm0oUm
- TLSH T11CE6AE0273D89475F5B31631893592695A3ABCA58F33CA8F328C2D5E7FB06809A35737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-02_44e7172f914158ce118c223c98f760b4_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_44e7172f914158ce118c223c98f760b4_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win11ltsc2024-20260629-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_44e7172f914158ce118c223c98f760b4_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_satacom_smoke-loader_stealc_stop_tofsee
- Size 13.5MB
- SHA256 4d02a8a48813d63f58426dc77cea115b7ff577f8e344d4a9a0f1fe609a397df4
- MD5 44e7172f914158ce118c223c98f760b4
- SHA1 c5350bceb26308e72e96a4a67dd0abfa397b985e
- SHA512 cffcc04630adfdbb0e79c52ab6f1e46690c769c03ad0d7d7c90781a2f8b1db7d31db9de531df70cd7c7110187e419a912a12580cfa4317c193ef518246a3b7f0
- SSDEEP 196608:OquFIF0wuPlCKrjRuJWquFIF0wuPlCKrjRuJ:voUm0oUm
- TLSH T11CE6AE0273D89475F5B31631893592695A3ABCA58F33CA8F328C2D5E7FB06809A35737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.