General
- Target 2026-07-02_aa389789d5a031c392e41a3671075454_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc
- Size 27.7MB
- Sample260702-jdn3aacs7n
- SHA256 ecb6c88f681df5733e1e9bf76335061225834a2c63ec14106590b20e87bd529f
- MD5 aa389789d5a031c392e41a3671075454
- SHA1 cb6774307e6c2bea684e2718628f392ab88195f5
- SHA512 793f92f655b8a266700e0b7d42017ecd9ffa5f1b25fbacd76570cf46d0e2b0162df45f42b0d4473bb4b7c7dc957b83cc373e5bf1d24cef079ae5e6e938d6aef5
- SSDEEP 196608:wgquFIF0wuPlCKrjRAgquFIF0wuPlCKrjRAgquFIF0wuPlCKrjRAgquFIF0wuPlq:w5oUmi5oUmi5oUmi5oUmieyn
- TLSH T19B579E1273D84435F5B31631997592295A7ABCA58F33CA8F33882D5E7FB16808A39733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-02_aa389789d5a031c392e41a3671075454_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_aa389789d5a031c392e41a3671075454_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_aa389789d5a031c392e41a3671075454_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc
- Size 27.7MB
- SHA256 ecb6c88f681df5733e1e9bf76335061225834a2c63ec14106590b20e87bd529f
- MD5 aa389789d5a031c392e41a3671075454
- SHA1 cb6774307e6c2bea684e2718628f392ab88195f5
- SHA512 793f92f655b8a266700e0b7d42017ecd9ffa5f1b25fbacd76570cf46d0e2b0162df45f42b0d4473bb4b7c7dc957b83cc373e5bf1d24cef079ae5e6e938d6aef5
- SSDEEP 196608:wgquFIF0wuPlCKrjRAgquFIF0wuPlCKrjRAgquFIF0wuPlCKrjRAgquFIF0wuPlq:w5oUmi5oUmi5oUmi5oUmieyn
- TLSH T19B579E1273D84435F5B31631997592295A7ABCA58F33CA8F33882D5E7FB16808A39733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.