General
- Target 2026-07-06_c9e2a5bfc0d7b1b30812857845955124_agent-tesla_amadey_blankgrabber_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_satacom_smoke-loader_stealc
- Size 27.6MB
- Sample260707-bbb1yaey5z
- SHA256 c00949c558216c3795428096082865eaffcc53111c5b60f25429b344bbe47fb7
- MD5 c9e2a5bfc0d7b1b30812857845955124
- SHA1 a6f53c9ddf8eccb0994ffa54a44b9fcf2426caf7
- SHA512 f3fbe0bdb64b30aa92e5429bb543ebcbd53da6da84382192a3a8279b2d49c83dec8759c1df4bc637b2fdbaa7f11b8c9d86a80295a3dc9ae00adcec15aead56bc
- SSDEEP 196608:QquFIF0wuPlCKrjRgquFIF0wuPlCKrjRgquFIF0wuPlCKrjRgquFIF0wuPlCKrjd:poUm7oUm7oUm7oUmZ
- TLSH T1C0579E0273D85475F1B316318A3592695A3ABCA58F33CA9F328C2D5D6FB16809E39733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-06_c9e2a5bfc0d7b1b30812857845955124_agent-tesla_amadey_blankgrabber_cobalt-strike_darkgate_g.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_c9e2a5bfc0d7b1b30812857845955124_agent-tesla_amadey_blankgrabber_cobalt-strike_darkgate_g.exe
Resource
win11ltsc2024-20260706-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_c9e2a5bfc0d7b1b30812857845955124_agent-tesla_amadey_blankgrabber_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_satacom_smoke-loader_stealc
- Size 27.6MB
- SHA256 c00949c558216c3795428096082865eaffcc53111c5b60f25429b344bbe47fb7
- MD5 c9e2a5bfc0d7b1b30812857845955124
- SHA1 a6f53c9ddf8eccb0994ffa54a44b9fcf2426caf7
- SHA512 f3fbe0bdb64b30aa92e5429bb543ebcbd53da6da84382192a3a8279b2d49c83dec8759c1df4bc637b2fdbaa7f11b8c9d86a80295a3dc9ae00adcec15aead56bc
- SSDEEP 196608:QquFIF0wuPlCKrjRgquFIF0wuPlCKrjRgquFIF0wuPlCKrjRgquFIF0wuPlCKrjd:poUm7oUm7oUm7oUmZ
- TLSH T1C0579E0273D85475F1B316318A3592695A3ABCA58F33CA9F328C2D5D6FB16809E39733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.