General
- Target 2026-07-02_f11372c49b0671a8c3f1849a5e826f82_agent-tesla_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_smoke-loader_stop_wannacry
- Size 17.7MB
- Sample260702-gfp19ab141
- SHA256 5b431e5d454b5b94e16f3a33b9e7a97715c4c54cacb270dfeb2ed5628380f701
- MD5 f11372c49b0671a8c3f1849a5e826f82
- SHA1 9604446b1089691d41964f4e0044e811eaf7ed14
- SHA512 9c7d1ab2e94b32baed1f9b11760b3e3af70f5d28cbd08568eb23ce1880cde2be3b8cd4de9d029ed3ada4c7d7cef6539c2a0f5554ddd81ac410577af58ce09858
- SSDEEP 196608:PTquFIF0wuPlCKrjRvQTObTquFIF0wuPlCKrjRvQTOb91yn:WoUm1QZoUm1Qqyn
- TLSH T13B179D0273D85875F0B316318A7592655A3ABC654F32CA8F32883E5E6F716C1AE39733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-02_f11372c49b0671a8c3f1849a5e826f82_agent-tesla_amadey_cobalt-strike_darkgate_elex_glassworm.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_f11372c49b0671a8c3f1849a5e826f82_agent-tesla_amadey_cobalt-strike_darkgate_elex_glassworm.exe
Resource
win11ltsc2024-20260629-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_f11372c49b0671a8c3f1849a5e826f82_agent-tesla_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_smoke-loader_stop_wannacry
- Size 17.7MB
- SHA256 5b431e5d454b5b94e16f3a33b9e7a97715c4c54cacb270dfeb2ed5628380f701
- MD5 f11372c49b0671a8c3f1849a5e826f82
- SHA1 9604446b1089691d41964f4e0044e811eaf7ed14
- SHA512 9c7d1ab2e94b32baed1f9b11760b3e3af70f5d28cbd08568eb23ce1880cde2be3b8cd4de9d029ed3ada4c7d7cef6539c2a0f5554ddd81ac410577af58ce09858
- SSDEEP 196608:PTquFIF0wuPlCKrjRvQTObTquFIF0wuPlCKrjRvQTOb91yn:WoUm1QZoUm1Qqyn
- TLSH T13B179D0273D85875F0B316318A7592655A3ABC654F32CA8F32883E5E6F716C1AE39733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.