General
- Target 2026-07-04_ce3d07724a6cbdb17ef6ffd37666a4de_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_smoke-loader_stealc
- Size 30.9MB
- Sample260704-hapnzab14t
- SHA256 36cc5a8b5fbb0b1bb74fe61b260264e1d2c9bb87c48755fdb85a8ddc6147b3fb
- MD5 ce3d07724a6cbdb17ef6ffd37666a4de
- SHA1 69f8b7172e4cc811d33501465ec391e89d777f58
- SHA512 66a1bf38f5b61d414131f3e567a7a2c16bf1070fb4ed0ef8be198ff070530e0b115887b48ebe8e6b13ba9946ed0faa547696d4e68884d2d075c72a72e6556996
- SSDEEP 196608:f1quFIF0wuPlCK8quFIF0wuPlCKrjRvtquFIF0wuPlCKrjRv1quFIF0wuPlCK8q0:fgoUqoUm1IoUm1goUqoUm1
- TLSH T198679E0277D44075F5B31631897592295679BCA58B338A9F338C2D9EAFB16C08E3A733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-04_ce3d07724a6cbdb17ef6ffd37666a4de_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-04_ce3d07724a6cbdb17ef6ffd37666a4de_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-04_ce3d07724a6cbdb17ef6ffd37666a4de_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_smoke-loader_stealc
- Size 30.9MB
- SHA256 36cc5a8b5fbb0b1bb74fe61b260264e1d2c9bb87c48755fdb85a8ddc6147b3fb
- MD5 ce3d07724a6cbdb17ef6ffd37666a4de
- SHA1 69f8b7172e4cc811d33501465ec391e89d777f58
- SHA512 66a1bf38f5b61d414131f3e567a7a2c16bf1070fb4ed0ef8be198ff070530e0b115887b48ebe8e6b13ba9946ed0faa547696d4e68884d2d075c72a72e6556996
- SSDEEP 196608:f1quFIF0wuPlCK8quFIF0wuPlCKrjRvtquFIF0wuPlCKrjRv1quFIF0wuPlCK8q0:fgoUqoUm1IoUm1goUqoUm1
- TLSH T198679E0277D44075F5B31631897592295679BCA58B338A9F338C2D9EAFB16C08E3A733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.