General
- Target 2026-07-03_7c8aed60076f3de658c6384d4a4aca55_agent-tesla_amadey_avoslocker_cobalt-strike_darkgate_elex_glassworm_hawkeye_hijackloader_icedid_karagany_luca-stealer_lynx_njrat_play_remcos_rhadamanthys_smoke-loader_stealc
- Size 22.2MB
- Sample260703-dc7kcaaw4w
- SHA256 f81a68a88ca5f9ab74291debc88a063700daa055e6676fcc2f2fd06c4d8d2533
- MD5 7c8aed60076f3de658c6384d4a4aca55
- SHA1 8f845d0c23b9f25d763ef58fabb5ed14dfe701c1
- SHA512 1abde731590a70b8c7b108c9ef1ea12e0320eaa71dd76be12880c0c0e7afcd53a9714e0a900fd9184e41fee0b95794c5def91e25d660273005716d26e2f2db5c
- SSDEEP 196608:WTzVquFIF0wuPlCKrjRxTzVquFIF0wuPlCKrjRxTzVquFIF0wuPlCKrjRxTz:WgoUm7goUm7goUm7
- TLSH T10937AE1273D84475F5B3163189759219A67ABCA58F32CA8F338C2D5E6F716808E3A733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-03_7c8aed60076f3de658c6384d4a4aca55_agent-tesla_amadey_avoslocker_cobalt-strike_darkgate_ele.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-03_7c8aed60076f3de658c6384d4a4aca55_agent-tesla_amadey_avoslocker_cobalt-strike_darkgate_ele.exe
Resource
win11ltsc2024-20260629-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_7c8aed60076f3de658c6384d4a4aca55_agent-tesla_amadey_avoslocker_cobalt-strike_darkgate_elex_glassworm_hawkeye_hijackloader_icedid_karagany_luca-stealer_lynx_njrat_play_remcos_rhadamanthys_smoke-loader_stealc
- Size 22.2MB
- SHA256 f81a68a88ca5f9ab74291debc88a063700daa055e6676fcc2f2fd06c4d8d2533
- MD5 7c8aed60076f3de658c6384d4a4aca55
- SHA1 8f845d0c23b9f25d763ef58fabb5ed14dfe701c1
- SHA512 1abde731590a70b8c7b108c9ef1ea12e0320eaa71dd76be12880c0c0e7afcd53a9714e0a900fd9184e41fee0b95794c5def91e25d660273005716d26e2f2db5c
- SSDEEP 196608:WTzVquFIF0wuPlCKrjRxTzVquFIF0wuPlCKrjRxTzVquFIF0wuPlCKrjRxTz:WgoUm7goUm7goUm7
- TLSH T10937AE1273D84475F5B3163189759219A67ABCA58F32CA8F338C2D5E6F716808E3A733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.