General
- Target 2026-07-02_deda7ed4a91e68ab6754b9fe756672a1_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_satacom_smoke-loader
- Size 23.8MB
- Sample260702-gjbb9sb19w
- SHA256 4fd0fa37dbecfb400fc5b5d0ab7399c1ea069a68408a25f6ac1cc985a8ba33fc
- MD5 deda7ed4a91e68ab6754b9fe756672a1
- SHA1 de4123ae6c7d018aa664d6de76ace707c5c74e7e
- SHA512 f684079707167828011e36e5a3a44c888f0639196c4c19ee5dcfd272e1a7410de67576c5e4052e219de27a25216409a2fd71029cda8db87a686cbb1c68f0170c
- SSDEEP 196608:OquFIF0wuPlCKrjRHquFIF0wuPlCKrjQquFIF0wuPlCK8quFIF0wuPlCKrjRR1yn:voUmUoUm1oUqoUmlyn
- TLSH T1BF478D1277D44435F5B31631997992295A7ABC658F338A8F338C2D9E6FB06C08A39733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-02_deda7ed4a91e68ab6754b9fe756672a1_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_deda7ed4a91e68ab6754b9fe756672a1_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_deda7ed4a91e68ab6754b9fe756672a1_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_satacom_smoke-loader
- Size 23.8MB
- SHA256 4fd0fa37dbecfb400fc5b5d0ab7399c1ea069a68408a25f6ac1cc985a8ba33fc
- MD5 deda7ed4a91e68ab6754b9fe756672a1
- SHA1 de4123ae6c7d018aa664d6de76ace707c5c74e7e
- SHA512 f684079707167828011e36e5a3a44c888f0639196c4c19ee5dcfd272e1a7410de67576c5e4052e219de27a25216409a2fd71029cda8db87a686cbb1c68f0170c
- SSDEEP 196608:OquFIF0wuPlCKrjRHquFIF0wuPlCKrjQquFIF0wuPlCK8quFIF0wuPlCKrjRR1yn:voUmUoUm1oUqoUmlyn
- TLSH T1BF478D1277D44435F5B31631997992295A7ABC658F338A8F338C2D9E6FB06C08A39733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.