General
- Target 2026-07-02_f1323c3754f5fe9444f27ebd05453814_agent-tesla_amadey_blankgrabber_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_satacom_smoke-loader_stealc
- Size 27.6MB
- Sample260702-tlll8sev2p
- SHA256 2bc59f52297863d3ef7ab01037efc54bd042a4f8577e3ab105076d2cbf1c4509
- MD5 f1323c3754f5fe9444f27ebd05453814
- SHA1 134c8b088161220f67153aedecc90f06b0a8bd5d
- SHA512 7141e19459bd8ac8556ed5554f8618ebd570a68170eb83513d14251fe7fa25b42bc0b4c310c560aa782864a55950aa944a32922353f44ac132d9cc5ea3451bcc
- SSDEEP 196608:+TOAquFIF0wuPlCKrjRuTOAquFIF0wuPlCKrjRuTOAquFIF0wuPlCKrjRuTO01yn:+qoUm8qoUm8qoUm87yn
- TLSH T1A0579E0276D85875F1B316318A3592A55A3EBC654F32CA8F33883E5D6F706C1AA39733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-02_f1323c3754f5fe9444f27ebd05453814_agent-tesla_amadey_blankgrabber_cobalt-strike_darkgate_g.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_f1323c3754f5fe9444f27ebd05453814_agent-tesla_amadey_blankgrabber_cobalt-strike_darkgate_g.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_f1323c3754f5fe9444f27ebd05453814_agent-tesla_amadey_blankgrabber_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_satacom_smoke-loader_stealc
- Size 27.6MB
- SHA256 2bc59f52297863d3ef7ab01037efc54bd042a4f8577e3ab105076d2cbf1c4509
- MD5 f1323c3754f5fe9444f27ebd05453814
- SHA1 134c8b088161220f67153aedecc90f06b0a8bd5d
- SHA512 7141e19459bd8ac8556ed5554f8618ebd570a68170eb83513d14251fe7fa25b42bc0b4c310c560aa782864a55950aa944a32922353f44ac132d9cc5ea3451bcc
- SSDEEP 196608:+TOAquFIF0wuPlCKrjRuTOAquFIF0wuPlCKrjRuTOAquFIF0wuPlCKrjRuTO01yn:+qoUm8qoUm8qoUm87yn
- TLSH T1A0579E0276D85875F1B316318A3592A55A3EBC654F32CA8F33883E5D6F706C1AA39733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.