General
- Target 2026-07-02_5920362b6d91698d4ebd5db162ea4ae9_agent-tesla_amadey_blankgrabber_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rugmi_satacom_smoke-loader
- Size 8.3MB
- Sample260702-zevt8aev5x
- SHA256 bf13ace9b6399a3dc30301605ed617c732c9b583c3e8294fb5b514c3ac78601f
- MD5 5920362b6d91698d4ebd5db162ea4ae9
- SHA1 25686a10456834edbcd67ba5d8d85dd5cfd2ab6f
- SHA512 004b6f4af8648e9e653490d4879905a8c08a1a7d485deccd69d93601a61b1154270a77466bc61ecdf27d545f37d56ac5cb07875c2de1fe757941cb118cebda0e
- SSDEEP 98304:jfKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jR4TU+2LZ1opDbSVHrjh7PL:LquFIF0wuPlCKrjRzLZ7pjhz
- TLSH T19E96AE1273D85475F5B316318A359225AA3ABC654B32CA8F33C82D5E7F716809E3A733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-02_5920362b6d91698d4ebd5db162ea4ae9_agent-tesla_amadey_blankgrabber_cobalt-strike_darkgate_g.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_5920362b6d91698d4ebd5db162ea4ae9_agent-tesla_amadey_blankgrabber_cobalt-strike_darkgate_g.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_5920362b6d91698d4ebd5db162ea4ae9_agent-tesla_amadey_blankgrabber_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rugmi_satacom_smoke-loader
- Size 8.3MB
- SHA256 bf13ace9b6399a3dc30301605ed617c732c9b583c3e8294fb5b514c3ac78601f
- MD5 5920362b6d91698d4ebd5db162ea4ae9
- SHA1 25686a10456834edbcd67ba5d8d85dd5cfd2ab6f
- SHA512 004b6f4af8648e9e653490d4879905a8c08a1a7d485deccd69d93601a61b1154270a77466bc61ecdf27d545f37d56ac5cb07875c2de1fe757941cb118cebda0e
- SSDEEP 98304:jfKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jR4TU+2LZ1opDbSVHrjh7PL:LquFIF0wuPlCKrjRzLZ7pjhz
- TLSH T19E96AE1273D85475F5B316318A359225AA3ABC654B32CA8F33C82D5E7F716809E3A733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.