General
- Target 2026-07-02_da764eb3936e57d12a1af7174e1d085f_agent-tesla_amadey_blankgrabber_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_satacom_smoke-loader_stop
- Size 8.7MB
- Sample260702-tvng7aex2q
- SHA256 9bfa05d9fdc0e3b2c09deb2a3edf54062b2a771b7c6bd6b69527324891de97ac
- MD5 da764eb3936e57d12a1af7174e1d085f
- SHA1 124f7b5d01b2a370becedb7551793268374e4c30
- SHA512 a8c881f5b24862e15613cf2a0c110edc34a8a15ec90614d166b48fdd1e2475f656ed5e52ac6c2efcb9bb1235eb7a834011973213e2aa55cae914a23be702b4e0
- SSDEEP 98304:j/KRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jR4TUDKsW1+M5NxmaFS:DquFIF0wuPlCKrjRh1yxm/
- TLSH T1BE968C1273D85535F1B71631997892545A3ABCA19F32CACF33882D5E6F70AC09A3A733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-02_da764eb3936e57d12a1af7174e1d085f_agent-tesla_amadey_blankgrabber_cobalt-strike_darkgate_g.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_da764eb3936e57d12a1af7174e1d085f_agent-tesla_amadey_blankgrabber_cobalt-strike_darkgate_g.exe
Resource
win11ltsc2024-20260629-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_da764eb3936e57d12a1af7174e1d085f_agent-tesla_amadey_blankgrabber_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_satacom_smoke-loader_stop
- Size 8.7MB
- SHA256 9bfa05d9fdc0e3b2c09deb2a3edf54062b2a771b7c6bd6b69527324891de97ac
- MD5 da764eb3936e57d12a1af7174e1d085f
- SHA1 124f7b5d01b2a370becedb7551793268374e4c30
- SHA512 a8c881f5b24862e15613cf2a0c110edc34a8a15ec90614d166b48fdd1e2475f656ed5e52ac6c2efcb9bb1235eb7a834011973213e2aa55cae914a23be702b4e0
- SSDEEP 98304:j/KRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jR4TUDKsW1+M5NxmaFS:DquFIF0wuPlCKrjRh1yxm/
- TLSH T1BE968C1273D85535F1B71631997892545A3ABCA19F32CACF33882D5E6F70AC09A3A733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.