General
- Target 2026-07-05_d48c8d573790339c2f2b2008b11d30cd_agent-tesla_amadey_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader
- Size 5.4MB
- Sample260705-3cbkcags6t
- SHA256 e982cbedf18adf52175b3f7bede9a7e626f98f8f5e22d4efd48ec80130b25802
- MD5 d48c8d573790339c2f2b2008b11d30cd
- SHA1 892627c710204c1723885d9e3b52af2f0616f116
- SHA512 ed3333130f95e2bae911b05622dd63ff21ae5e68ee6bd8b0a74188485348480db9ccb5174dffd28d9b051fcae7a32364c522f78f56d7a62f99658c7afa9fb259
- SSDEEP 98304:OKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jK:OquFIF0wuPlCKrjK
- TLSH T140469D1277D44031F5B316315A7992295679BC658E33CE9F328C2D9EBBB0AC08A39737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-05_d48c8d573790339c2f2b2008b11d30cd_agent-tesla_amadey_darkgate_glassworm_hawkeye_hijackload.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_d48c8d573790339c2f2b2008b11d30cd_agent-tesla_amadey_darkgate_glassworm_hawkeye_hijackload.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_d48c8d573790339c2f2b2008b11d30cd_agent-tesla_amadey_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader
- Size 5.4MB
- SHA256 e982cbedf18adf52175b3f7bede9a7e626f98f8f5e22d4efd48ec80130b25802
- MD5 d48c8d573790339c2f2b2008b11d30cd
- SHA1 892627c710204c1723885d9e3b52af2f0616f116
- SHA512 ed3333130f95e2bae911b05622dd63ff21ae5e68ee6bd8b0a74188485348480db9ccb5174dffd28d9b051fcae7a32364c522f78f56d7a62f99658c7afa9fb259
- SSDEEP 98304:OKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jK:OquFIF0wuPlCKrjK
- TLSH T140469D1277D44031F5B316315A7992295679BC658E33CE9F328C2D9EBBB0AC08A39737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.