General
- Target 2026-07-02_338a3fe11f9f1f9fc9e8b1dae1f98c15_agent-tesla_amadey_cobalt-strike_coinminer_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_rugmi_satacom_smoke-loader_stealc
- Size 7.2MB
- Sample260702-ha76babw4m
- SHA256 19680f104f923b70a30e1ee983b173edeea8d6bfa903d2fa9ddc458c385e3bdf
- MD5 338a3fe11f9f1f9fc9e8b1dae1f98c15
- SHA1 aae7a841c11e8f45c70901a1faab9e8b2c9bbb18
- SHA512 7bbffafa542542c2c8aa15369b4b359987b82fdcb2a4c9fe5950ac1ed66908eaf64ba7b976cc310305da1a0671c980b5491d7be043bbaf7c634c0fe99a46f95e
- SSDEEP 98304:gKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jR4TUdLZ1opDbSVHrjIy:gquFIF0wuPlCKrjR7LZ7pj
- TLSH T16E769E1272D44035F5B316319A3592296A79BCA59F33CA9F338C2D5E7FB16808A36733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-02_338a3fe11f9f1f9fc9e8b1dae1f98c15_agent-tesla_amadey_cobalt-strike_coinminer_darkgate_glas.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_338a3fe11f9f1f9fc9e8b1dae1f98c15_agent-tesla_amadey_cobalt-strike_coinminer_darkgate_glas.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_338a3fe11f9f1f9fc9e8b1dae1f98c15_agent-tesla_amadey_cobalt-strike_coinminer_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_rugmi_satacom_smoke-loader_stealc
- Size 7.2MB
- SHA256 19680f104f923b70a30e1ee983b173edeea8d6bfa903d2fa9ddc458c385e3bdf
- MD5 338a3fe11f9f1f9fc9e8b1dae1f98c15
- SHA1 aae7a841c11e8f45c70901a1faab9e8b2c9bbb18
- SHA512 7bbffafa542542c2c8aa15369b4b359987b82fdcb2a4c9fe5950ac1ed66908eaf64ba7b976cc310305da1a0671c980b5491d7be043bbaf7c634c0fe99a46f95e
- SSDEEP 98304:gKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jR4TUdLZ1opDbSVHrjIy:gquFIF0wuPlCKrjR7LZ7pj
- TLSH T16E769E1272D44035F5B316319A3592296A79BCA59F33CA9F338C2D5E7FB16808A36733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.