General
- Target 2026-07-02_7cf13bc2fe657aa347fd2657bdb2345a_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_smoke-loader_stop
- Size 23.0MB
- Sample260702-sa8rysgv7w
- SHA256 34e19777a290834610640f1f3d86b79ed52d7ec23f468c769f07766c6e549a52
- MD5 7cf13bc2fe657aa347fd2657bdb2345a
- SHA1 117aa4b3206dc11aadb930ea0807c80b1700aa1c
- SHA512 3a406c52880ac4fefd4e3cadf55a302cc1f127be06a081eee0f4df1edb90880e4189c6831e313c01c678b840f3fa580c391f62d7adc31fb7ed217fd259069de6
- SSDEEP 196608:fGdquFIF0wuPlCK8quFIF0wuPlCKrjRvGdquFIF0wuPlCK8quFIF0wuPlCKrjRv/:ffoUqoUm1foUqoUm1/
- TLSH T146379D1276D58031F5B316318A7592695679BCA58A33CD9F338C2D9EAFB06C08E39733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-02_7cf13bc2fe657aa347fd2657bdb2345a_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_7cf13bc2fe657aa347fd2657bdb2345a_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_7cf13bc2fe657aa347fd2657bdb2345a_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_smoke-loader_stop
- Size 23.0MB
- SHA256 34e19777a290834610640f1f3d86b79ed52d7ec23f468c769f07766c6e549a52
- MD5 7cf13bc2fe657aa347fd2657bdb2345a
- SHA1 117aa4b3206dc11aadb930ea0807c80b1700aa1c
- SHA512 3a406c52880ac4fefd4e3cadf55a302cc1f127be06a081eee0f4df1edb90880e4189c6831e313c01c678b840f3fa580c391f62d7adc31fb7ed217fd259069de6
- SSDEEP 196608:fGdquFIF0wuPlCK8quFIF0wuPlCKrjRvGdquFIF0wuPlCK8quFIF0wuPlCKrjRv/:ffoUqoUm1foUqoUm1/
- TLSH T146379D1276D58031F5B316318A7592695679BCA58A33CD9F338C2D9EAFB06C08E39733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.