General
- Target 2026-07-03_e4b496b6777966341f85d7176d97820b_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_satacom_smoke-loader_stop
- Size 8.1MB
- Sample260703-jjljcaas5l
- SHA256 4f2abe41347a837a4554fce84bec04dc9664547e76f12d10ebe9083f9c57c40e
- MD5 e4b496b6777966341f85d7176d97820b
- SHA1 06f4377fe2612ef63997499a97b833b02f750388
- SHA512 a0adcc7a42fb0810c1894192633d7818c84368d99b9a6abecb7254ae16abb922d93904ec29cb0bffbd75bfeb577ce5276f1498b5c90de9b5219cf0acf02d3193
- SSDEEP 98304:gKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jR4TUDKsW1+M5Nxm:gquFIF0wuPlCKrjRh1yxm
- TLSH T16F868D1173D84535F1B716319A7992645A3BBCA59F32CACF32882D5E6F70AC08A36733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-03_e4b496b6777966341f85d7176d97820b_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-03_e4b496b6777966341f85d7176d97820b_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_e4b496b6777966341f85d7176d97820b_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_satacom_smoke-loader_stop
- Size 8.1MB
- SHA256 4f2abe41347a837a4554fce84bec04dc9664547e76f12d10ebe9083f9c57c40e
- MD5 e4b496b6777966341f85d7176d97820b
- SHA1 06f4377fe2612ef63997499a97b833b02f750388
- SHA512 a0adcc7a42fb0810c1894192633d7818c84368d99b9a6abecb7254ae16abb922d93904ec29cb0bffbd75bfeb577ce5276f1498b5c90de9b5219cf0acf02d3193
- SSDEEP 98304:gKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jR4TUDKsW1+M5Nxm:gquFIF0wuPlCKrjRh1yxm
- TLSH T16F868D1173D84535F1B716319A7992645A3BBCA59F32CACF32882D5E6F70AC08A36733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.