General
- Target 2026-07-02_37c759cd3f8219817b94951a7d7bb08f_agent-tesla_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rugmi_smoke-loader
- Size 7.6MB
- Sample260702-qn57wact4l
- SHA256 10fdd785b4567b550cc78378e7492c84580d2b6c4930c8296690f95639ad2401
- MD5 37c759cd3f8219817b94951a7d7bb08f
- SHA1 06eaf79ae82703d5679553e2ea05079f1786b646
- SHA512 435c2640d695c660eacd7c64d26b429c7d754102a83426e975ab77308093234b5cd7d75982b2e6f17360868cff4668a53a394adf570710d27835d0b429e32c04
- SSDEEP 98304:mKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jR4TUApLZ1opDbSVHrj:mquFIF0wuPlCKrjR2LZ7pj
- TLSH T1F086AE1273D84435F5B316319A3592646A3ABCA58F32CA9F328C3D5D7FB16809A36733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-02_37c759cd3f8219817b94951a7d7bb08f_agent-tesla_amadey_cobalt-strike_coinminer_darkgate_elex.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_37c759cd3f8219817b94951a7d7bb08f_agent-tesla_amadey_cobalt-strike_coinminer_darkgate_elex.exe
Resource
win11ltsc2024-20260629-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_37c759cd3f8219817b94951a7d7bb08f_agent-tesla_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rugmi_smoke-loader
- Size 7.6MB
- SHA256 10fdd785b4567b550cc78378e7492c84580d2b6c4930c8296690f95639ad2401
- MD5 37c759cd3f8219817b94951a7d7bb08f
- SHA1 06eaf79ae82703d5679553e2ea05079f1786b646
- SHA512 435c2640d695c660eacd7c64d26b429c7d754102a83426e975ab77308093234b5cd7d75982b2e6f17360868cff4668a53a394adf570710d27835d0b429e32c04
- SSDEEP 98304:mKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jR4TUApLZ1opDbSVHrj:mquFIF0wuPlCKrjR2LZ7pj
- TLSH T1F086AE1273D84435F5B316319A3592646A3ABCA58F32CA9F328C3D5D7FB16809A36733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.