General
- Target 2026-07-02_a5f59a31f7c88b3e4cafc6c3a96d3f4d_agent-tesla_amadey_avoslocker_cobalt-strike_darkgate_elex_glassworm_hawkeye_hijackloader_icedid_karagany_luca-stealer_lynx_njrat_play_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc
- Size 11.4MB
- Sample260702-ylqcmsdw9v
- SHA256 41d969f45f6343dba15397395295744c414dd7ed2d9f5bee9ec9af49204c7192
- MD5 a5f59a31f7c88b3e4cafc6c3a96d3f4d
- SHA1 26d35677942226b359232b11a250ccc300de42c9
- SHA512 e3d42f515babc9164a01570e3699b290392760ad3fa2bc567844abe99f9a2a5466a2f2c9b013bcb1674a31213fce79f90680470ec64b9db45c6a5410f16b099c
- SSDEEP 98304:NtKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xFKRuy5a/OU/jIEeQfoR/IuOFVf:TquFIF0wuPlCK8quFIF0wuPlCKrjRv
- TLSH T156C69E1277D58031F5B31631897592295679BCA58A338D9F338C2D9EAFB06C08E3A737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-02_a5f59a31f7c88b3e4cafc6c3a96d3f4d_agent-tesla_amadey_avoslocker_cobalt-strike_darkgate_ele.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_a5f59a31f7c88b3e4cafc6c3a96d3f4d_agent-tesla_amadey_avoslocker_cobalt-strike_darkgate_ele.exe
Resource
win11ltsc2024-20260629-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_a5f59a31f7c88b3e4cafc6c3a96d3f4d_agent-tesla_amadey_avoslocker_cobalt-strike_darkgate_elex_glassworm_hawkeye_hijackloader_icedid_karagany_luca-stealer_lynx_njrat_play_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc
- Size 11.4MB
- SHA256 41d969f45f6343dba15397395295744c414dd7ed2d9f5bee9ec9af49204c7192
- MD5 a5f59a31f7c88b3e4cafc6c3a96d3f4d
- SHA1 26d35677942226b359232b11a250ccc300de42c9
- SHA512 e3d42f515babc9164a01570e3699b290392760ad3fa2bc567844abe99f9a2a5466a2f2c9b013bcb1674a31213fce79f90680470ec64b9db45c6a5410f16b099c
- SSDEEP 98304:NtKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xFKRuy5a/OU/jIEeQfoR/IuOFVf:TquFIF0wuPlCK8quFIF0wuPlCKrjRv
- TLSH T156C69E1277D58031F5B31631897592295679BCA58A338D9F338C2D9EAFB06C08E3A737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.