General
- Target 2026-07-02_89e515851c5f01e06e711d82244a5632_agent-tesla_amadey_blankgrabber_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_satacom_smoke-loader_stop
- Size 17.2MB
- Sample260702-vpj39aav5x
- SHA256 d39f4a316979c0c7daa66000584fe4f938c3902910c6cc1bbf72ddbf856d96c0
- MD5 89e515851c5f01e06e711d82244a5632
- SHA1 ce3b2f3bc9ecfa972e51991b6126157129722a2c
- SHA512 2a0f223eb2492d82c1d070c0deaf4fc23f99e5a817bb68f395205c136e911dd9c5d71b0c8529362ccf0b633b47412b53b1cea4752425ca2ea4397e4c51b713f3
- SSDEEP 196608:DquFIF0wuPlCKrjRh1yxmgquFIF0wuPlCKrjRh1yxmq:uoUmFyxuoUmFyxn
- TLSH T112078C0277D85535F1B71631997892645A3ABCA19F32CACF33882D5E6F70AC09A36733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-02_89e515851c5f01e06e711d82244a5632_agent-tesla_amadey_blankgrabber_cobalt-strike_darkgate_g.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_89e515851c5f01e06e711d82244a5632_agent-tesla_amadey_blankgrabber_cobalt-strike_darkgate_g.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_89e515851c5f01e06e711d82244a5632_agent-tesla_amadey_blankgrabber_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_satacom_smoke-loader_stop
- Size 17.2MB
- SHA256 d39f4a316979c0c7daa66000584fe4f938c3902910c6cc1bbf72ddbf856d96c0
- MD5 89e515851c5f01e06e711d82244a5632
- SHA1 ce3b2f3bc9ecfa972e51991b6126157129722a2c
- SHA512 2a0f223eb2492d82c1d070c0deaf4fc23f99e5a817bb68f395205c136e911dd9c5d71b0c8529362ccf0b633b47412b53b1cea4752425ca2ea4397e4c51b713f3
- SSDEEP 196608:DquFIF0wuPlCKrjRh1yxmgquFIF0wuPlCKrjRh1yxmq:uoUmFyxuoUmFyxn
- TLSH T112078C0277D85535F1B71631997892645A3ABCA19F32CACF33882D5E6F70AC09A36733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.