General
- Target 2026-07-02_18fd66c4a0410be99f6f30b384f2fd69_agent-tesla_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc_stop
- Size 25.8MB
- Sample260702-hdgsjads91
- SHA256 d12fb643d25251bd8b5a0f7ebb7b842144f56ae629662dc027ca2903c3a5bb03
- MD5 18fd66c4a0410be99f6f30b384f2fd69
- SHA1 f36c86df86079f2c8886d3713fa4627b2cc955d5
- SHA512 83104853ce4f9ede479b6185583d972e0217e2c81b521f3fda87f199fb71690975acd5a9a49e944f4bb50ceef9c3b9d3fdc5b7686ef25d5e5e8606f0b673fa4d
- SSDEEP 196608:8squFIF0wuPlCKrjRh1yxmsquFIF0wuPlCKrjRh1yxmsquFIF0wuPlCKrjRh1yxe:QoUmFyxmoUmFyxmoUmFyxe
- TLSH T1B1478D1177D84535F1B716319A7992645A3ABCA58F32CACF33882D5E6F70AC08A36733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-02_18fd66c4a0410be99f6f30b384f2fd69_agent-tesla_amadey_cobalt-strike_darkgate_elex_glassworm.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_18fd66c4a0410be99f6f30b384f2fd69_agent-tesla_amadey_cobalt-strike_darkgate_elex_glassworm.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_18fd66c4a0410be99f6f30b384f2fd69_agent-tesla_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc_stop
- Size 25.8MB
- SHA256 d12fb643d25251bd8b5a0f7ebb7b842144f56ae629662dc027ca2903c3a5bb03
- MD5 18fd66c4a0410be99f6f30b384f2fd69
- SHA1 f36c86df86079f2c8886d3713fa4627b2cc955d5
- SHA512 83104853ce4f9ede479b6185583d972e0217e2c81b521f3fda87f199fb71690975acd5a9a49e944f4bb50ceef9c3b9d3fdc5b7686ef25d5e5e8606f0b673fa4d
- SSDEEP 196608:8squFIF0wuPlCKrjRh1yxmsquFIF0wuPlCKrjRh1yxmsquFIF0wuPlCKrjRh1yxe:QoUmFyxmoUmFyxmoUmFyxe
- TLSH T1B1478D1177D84535F1B716319A7992645A3ABCA58F32CACF33882D5E6F70AC08A36733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.