General
- Target 2026-07-02_fb61aa1484327f1cc33b99c955748033_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_smoke-loader_stop_tofsee
- Size 20.7MB
- Sample260702-gdxnbab12x
- SHA256 18e64e361dff353769a321b6ae7aa1f8ce7585a01984c8fa7448d9592d10a5d0
- MD5 fb61aa1484327f1cc33b99c955748033
- SHA1 0c3f4840fef964b3d7141d867fdeddfdcf481426
- SHA512 3f1825ca6c17165aaf322a464e586202981bf6aa677f19c3c5f8cf8989d66fe24b8c86222a90841d50b342778662e064d034eefae3703e565504b599cef28f45
- SSDEEP 196608:iSquFIF0wuPlCKrjRySquFIF0wuPlCKrjRySquFIF0wuPlCKrjRyj:woUmaoUmaoUmo
- TLSH T11E279E1273D84475F5B316318A3592595A3ABCA58F32CA8F338C2D9E6F716808E39737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-02_fb61aa1484327f1cc33b99c955748033_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_fb61aa1484327f1cc33b99c955748033_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_fb61aa1484327f1cc33b99c955748033_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_smoke-loader_stop_tofsee
- Size 20.7MB
- SHA256 18e64e361dff353769a321b6ae7aa1f8ce7585a01984c8fa7448d9592d10a5d0
- MD5 fb61aa1484327f1cc33b99c955748033
- SHA1 0c3f4840fef964b3d7141d867fdeddfdcf481426
- SHA512 3f1825ca6c17165aaf322a464e586202981bf6aa677f19c3c5f8cf8989d66fe24b8c86222a90841d50b342778662e064d034eefae3703e565504b599cef28f45
- SSDEEP 196608:iSquFIF0wuPlCKrjRySquFIF0wuPlCKrjRySquFIF0wuPlCKrjRyj:woUmaoUmaoUmo
- TLSH T11E279E1273D84475F5B316318A3592595A3ABCA58F32CA8F338C2D9E6F716808E39737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.