General
- Target 2026-07-03_2863355616327fbf80cdcdabe197a1b4_agent-tesla_amadey_blankgrabber_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_satacom_smoke-loader_stealc
- Size 17.9MB
- Sample260703-rtl7maf18j
- SHA256 229295fc37dbab38378c01a04d28e80d2aa208af1ccacf85fe279118b231134d
- MD5 2863355616327fbf80cdcdabe197a1b4
- SHA1 24ab292a31d4ca8be02c2e78ba1f0e9d8b02981f
- SHA512 6e8b11f858be6453a61b95fc1cc39dad3fee68ce570a62e25076ae2321c67b14a5a5d275ba76eb1eb1b4c6c547faf97f87f8a4d36f58caa44eb54a273608382e
- SSDEEP 196608:6quFIF0wuPlCKrjRvQTOYquFIF0wuPlCKrjRvQTOM1yn:joUm1QioUm1Qzyn
- TLSH T18B179E0273D86875F1B316318A7582655A3ABC654F32CA8F32883E5D6F716C1AE39733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-03_2863355616327fbf80cdcdabe197a1b4_agent-tesla_amadey_blankgrabber_cobalt-strike_darkgate_g.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-03_2863355616327fbf80cdcdabe197a1b4_agent-tesla_amadey_blankgrabber_cobalt-strike_darkgate_g.exe
Resource
win11ltsc2024-20260629-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_2863355616327fbf80cdcdabe197a1b4_agent-tesla_amadey_blankgrabber_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_satacom_smoke-loader_stealc
- Size 17.9MB
- SHA256 229295fc37dbab38378c01a04d28e80d2aa208af1ccacf85fe279118b231134d
- MD5 2863355616327fbf80cdcdabe197a1b4
- SHA1 24ab292a31d4ca8be02c2e78ba1f0e9d8b02981f
- SHA512 6e8b11f858be6453a61b95fc1cc39dad3fee68ce570a62e25076ae2321c67b14a5a5d275ba76eb1eb1b4c6c547faf97f87f8a4d36f58caa44eb54a273608382e
- SSDEEP 196608:6quFIF0wuPlCKrjRvQTOYquFIF0wuPlCKrjRvQTOM1yn:joUm1QioUm1Qzyn
- TLSH T18B179E0273D86875F1B316318A7582655A3ABC654F32CA8F32883E5D6F716C1AE39733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.