General
- Target 2026-07-06_baad5cf37db0f86d596683c86ec732f7_agent-tesla_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_smoke-loader_stealc_tofsee
- Size 27.7MB
- Sample260707-bpdfxse19v
- SHA256 caa0867179443e7d6e19298d71d0e4a7e477219c0d62a8065e597f5cd65e0d73
- MD5 baad5cf37db0f86d596683c86ec732f7
- SHA1 164e984023861bea8aeabc28a4b3daf2f24aedd0
- SHA512 2421db034ec7928695ae5dfb527e99309e307da7b7a56e43a1f19b1958d5eb92d76709aa8baa696e60da3bf97ff79c3c99b1d68c2370ab0416ab08e12379d217
- SSDEEP 196608:TquFIF0wuPlCKrjRvNRquFIF0wuPlCKrjRvNRquFIF0wuPlCKrjRvNRquFIF0wu0:+oUm1NUoUm1NUoUm1NUoUm1Nlyn
- TLSH T198579E1273D44035F5B316319A7592695A7ABCA59F33CA8F33882D5E6FB06C08A39733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-06_baad5cf37db0f86d596683c86ec732f7_agent-tesla_amadey_cobalt-strike_darkgate_elex_glassworm.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_baad5cf37db0f86d596683c86ec732f7_agent-tesla_amadey_cobalt-strike_darkgate_elex_glassworm.exe
Resource
win11ltsc2024-20260706-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_baad5cf37db0f86d596683c86ec732f7_agent-tesla_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_smoke-loader_stealc_tofsee
- Size 27.7MB
- SHA256 caa0867179443e7d6e19298d71d0e4a7e477219c0d62a8065e597f5cd65e0d73
- MD5 baad5cf37db0f86d596683c86ec732f7
- SHA1 164e984023861bea8aeabc28a4b3daf2f24aedd0
- SHA512 2421db034ec7928695ae5dfb527e99309e307da7b7a56e43a1f19b1958d5eb92d76709aa8baa696e60da3bf97ff79c3c99b1d68c2370ab0416ab08e12379d217
- SSDEEP 196608:TquFIF0wuPlCKrjRvNRquFIF0wuPlCKrjRvNRquFIF0wuPlCKrjRvNRquFIF0wu0:+oUm1NUoUm1NUoUm1NUoUm1Nlyn
- TLSH T198579E1273D44035F5B316319A7592695A7ABCA59F33CA8F33882D5E6FB06C08A39733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.