General
- Target 2026-07-03_d86ac5c17d700fc8187a783af2661b47_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_rugmi_smoke-loader_stealc
- Size 9.8MB
- Sample260703-cz23pse18j
- SHA256 b6204bc457ee35aa65d7681f25ad9bdc3cbb80ecce7e3511de2acc261135bb7d
- MD5 d86ac5c17d700fc8187a783af2661b47
- SHA1 ce58af40d57fb26599a3575d958b8993512442b4
- SHA512 732d3f9794ce4b4beb4ac5ec92be25d548482b01567c4945d362f12f9cd1b5846c06b56d93be9d1f40595c5a244b12f0391720d02434594a79c685d5456372c7
- SSDEEP 196608:fqzMLZ7pjIquFIF0wuPlCKrjRvqzMLZ7pj:ff7txoUm1f7t
- TLSH T171A6AE1272D44075F1B316319A359664AA3ABC654B32CA9F33C83A5E7F716809F3A733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-03_d86ac5c17d700fc8187a783af2661b47_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-03_d86ac5c17d700fc8187a783af2661b47_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_d86ac5c17d700fc8187a783af2661b47_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_rugmi_smoke-loader_stealc
- Size 9.8MB
- SHA256 b6204bc457ee35aa65d7681f25ad9bdc3cbb80ecce7e3511de2acc261135bb7d
- MD5 d86ac5c17d700fc8187a783af2661b47
- SHA1 ce58af40d57fb26599a3575d958b8993512442b4
- SHA512 732d3f9794ce4b4beb4ac5ec92be25d548482b01567c4945d362f12f9cd1b5846c06b56d93be9d1f40595c5a244b12f0391720d02434594a79c685d5456372c7
- SSDEEP 196608:fqzMLZ7pjIquFIF0wuPlCKrjRvqzMLZ7pj:ff7txoUm1f7t
- TLSH T171A6AE1272D44075F1B316319A359664AA3ABC654B32CA9F33C83A5E7F716809F3A733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.