General
- Target 2026-07-06_cb5d973b0fec826f1d812ea7129d838f_agent-tesla_amadey_avoslocker_cobalt-strike_darkgate_elex_glassworm_hawkeye_hijackloader_icedid_karagany_luca-stealer_lynx_njrat_play_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc_stop
- Size 25.6MB
- Sample260707-a99t7aby3p
- SHA256 2e726830395a2ead431140906351e5e201bfac72cd2a8ef685c294dc241ec6e7
- MD5 cb5d973b0fec826f1d812ea7129d838f
- SHA1 5fbcdc6136cab9b63f3b9ff5ec370c8f1c91ff5e
- SHA512 5274ca5de37d7bd625c8509ddb16d67be6d51143a8b4e13e5b10905623b4c6f98979b8ec1a5f77b9c0222b63a05c34f6b1110560e52e6753f742078b8419de4a
- SSDEEP 196608:rquFIF0wuPlCKrjRh1yxmsquFIF0wuPlCKrjRh1yxmsquFIF0wuPlCKrjRh1yxmp:GoUmFyxmoUmFyxmoUmFyxM
- TLSH T1FA478D1177D84535F1B316319A7992645A3ABCA59F32CACF33882D5E6F70AC08A36733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-06_cb5d973b0fec826f1d812ea7129d838f_agent-tesla_amadey_avoslocker_cobalt-strike_darkgate_ele.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_cb5d973b0fec826f1d812ea7129d838f_agent-tesla_amadey_avoslocker_cobalt-strike_darkgate_ele.exe
Resource
win11ltsc2024-20260706-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_cb5d973b0fec826f1d812ea7129d838f_agent-tesla_amadey_avoslocker_cobalt-strike_darkgate_elex_glassworm_hawkeye_hijackloader_icedid_karagany_luca-stealer_lynx_njrat_play_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc_stop
- Size 25.6MB
- SHA256 2e726830395a2ead431140906351e5e201bfac72cd2a8ef685c294dc241ec6e7
- MD5 cb5d973b0fec826f1d812ea7129d838f
- SHA1 5fbcdc6136cab9b63f3b9ff5ec370c8f1c91ff5e
- SHA512 5274ca5de37d7bd625c8509ddb16d67be6d51143a8b4e13e5b10905623b4c6f98979b8ec1a5f77b9c0222b63a05c34f6b1110560e52e6753f742078b8419de4a
- SSDEEP 196608:rquFIF0wuPlCKrjRh1yxmsquFIF0wuPlCKrjRh1yxmsquFIF0wuPlCKrjRh1yxmp:GoUmFyxmoUmFyxmoUmFyxM
- TLSH T1FA478D1177D84535F1B316319A7992645A3ABCA59F32CACF33882D5E6F70AC08A36733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.