General
- Target 2026-07-03_2fe7194c6ec85674e8f30990df38f5dd_agent-tesla_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_smoke-loader_stealc_vidar_wannacry
- Size 22.7MB
- Sample260703-dr5pasay7x
- SHA256 cc1a871131634a8947f55fe42c025d70be134a0f5ade86f3d207f26b471ebf16
- MD5 2fe7194c6ec85674e8f30990df38f5dd
- SHA1 cfa9392d8eeec630b38c77349e205e70260474ae
- SHA512 65e000ab2b9f2d018d98738204ee66e17360add4255df9998982866ed9e1dc18f72fd03d1888391ac18ceb0dab6e6c1167426618d883c8badac321ee7adfb58a
- SSDEEP 196608:SWJquFIF0wuPlCKrjRvkgWTquFIF0wuPlCKrjRvkgWJquFIF0wuPlCKrjRvkgW:SJoUm1kgToUm1kgJoUm1kg
- TLSH T12E37AE1277D84075F5B3163189359229AA7ABCA55F32CA8F33882D5D7F716808E3A733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
2026-07-03_2fe7194c6ec85674e8f30990df38f5dd_agent-tesla_amadey_cobalt-strike_darkgate_elex_glassworm.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-03_2fe7194c6ec85674e8f30990df38f5dd_agent-tesla_amadey_cobalt-strike_darkgate_elex_glassworm.exe
Resource
win11ltsc2024-20260629-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_2fe7194c6ec85674e8f30990df38f5dd_agent-tesla_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_smoke-loader_stealc_vidar_wannacry
- Size 22.7MB
- SHA256 cc1a871131634a8947f55fe42c025d70be134a0f5ade86f3d207f26b471ebf16
- MD5 2fe7194c6ec85674e8f30990df38f5dd
- SHA1 cfa9392d8eeec630b38c77349e205e70260474ae
- SHA512 65e000ab2b9f2d018d98738204ee66e17360add4255df9998982866ed9e1dc18f72fd03d1888391ac18ceb0dab6e6c1167426618d883c8badac321ee7adfb58a
- SSDEEP 196608:SWJquFIF0wuPlCKrjRvkgWTquFIF0wuPlCKrjRvkgWJquFIF0wuPlCKrjRvkgW:SJoUm1kgToUm1kgJoUm1kg
- TLSH T12E37AE1277D84075F5B3163189359229AA7ABCA55F32CA8F33882D5D7F716808E3A733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.