General
- Target 2026-07-02_61027a3353ecdd0be42161b811fbda77_agent-tesla_amadey_blankgrabber_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_satacom_smoke-loader_stop
- Size 10.0MB
- Sample260702-zbn79set8s
- SHA256 717202b3d70dcc5c365dc936871020b2eb0a49407660238520f3d4ec8c1fd5f6
- MD5 61027a3353ecdd0be42161b811fbda77
- SHA1 68de316bb1df7793b1688082e67a87f203671b51
- SHA512 1ad9c267dd1d32f6507f8cae9ac2fb628e67fd7d9064ba87a03ef0895f0a87789bf1489cb69fd82ee04e66aafc9fc3a67c6f3d56575b9a1618826ed5f625230e
- SSDEEP 98304:SYKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jR4TUxQTOhKUMKsW1+M5Nn:SYquFIF0wuPlCKrjRvQTObM1yn
- TLSH T190B68D0272D85575F0B316319B7582A55B3ABC615F32CA8F32883E5E6F716C0AA39733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-02_61027a3353ecdd0be42161b811fbda77_agent-tesla_amadey_blankgrabber_cobalt-strike_darkgate_g.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_61027a3353ecdd0be42161b811fbda77_agent-tesla_amadey_blankgrabber_cobalt-strike_darkgate_g.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_61027a3353ecdd0be42161b811fbda77_agent-tesla_amadey_blankgrabber_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_satacom_smoke-loader_stop
- Size 10.0MB
- SHA256 717202b3d70dcc5c365dc936871020b2eb0a49407660238520f3d4ec8c1fd5f6
- MD5 61027a3353ecdd0be42161b811fbda77
- SHA1 68de316bb1df7793b1688082e67a87f203671b51
- SHA512 1ad9c267dd1d32f6507f8cae9ac2fb628e67fd7d9064ba87a03ef0895f0a87789bf1489cb69fd82ee04e66aafc9fc3a67c6f3d56575b9a1618826ed5f625230e
- SSDEEP 98304:SYKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jR4TUxQTOhKUMKsW1+M5Nn:SYquFIF0wuPlCKrjRvQTObM1yn
- TLSH T190B68D0272D85575F0B316319B7582A55B3ABC615F32CA8F32883E5E6F716C0AA39733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.