agenttesla | 0b339883d9d76c11e4b22915fa67303fb4302d9855e219db7e803e693e6fb899[.]bin

Resubmissions

31/03/2023, 17:36

230331-v63lxsdd7x10

21/03/2023, 11:45

230321-nwr9waaa9710

25/02/2023, 13:19

230225-qkzwpada7y10

18/07/2022, 10:42

220718-mrnkfsbeh310

Sharing

Copy URL Twitter E-mail

General

Target
0b339883d9d76c11e4b22915fa67303fb4302d9855e219db7e803e693e6fb899.bin
Size 405KB
Sample220718-mrnkfsbeh3
SHA256 0b339883d9d76c11e4b22915fa67303fb4302d9855e219db7e803e693e6fb899
MD5 1cbbb572f88a23f55f086b96327fe5e0
SHA1 6d1593368828198dfb5b9eceaab71f49aa535c40
SHA512 dcab6c6025ca9da5301cb6913be35d4285d1ceecc9bd811dfd23727b1b2a14618f3e7a98c18d7a335373c5160c9cb5f62c10f0385387ab7417fc917283981ffd
SSDEEP 3072:WV9Es470kT97kFUxz3mKMACR3R7DyWvEXNemiS0KPMID5whT0bMNj67:dwkwM3zUJtMtwmIj67
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

infostealer agenttesla darktrack lockfile m00nd3v_logger matiex shurk stormkitty masslogger mountlocker joker darkcomet

Malware Config

Extracted

Family

joker

https://flashdownloadserver.oss-cn-hongkong.aliyuncs.com

Signatures

AgentTesla payload 1 IoCs

resource	yara_rule
sample	family_agenttesla

Agenttesla family
agenttesla

DarkTrack payload 1 IoCs

resource	yara_rule
sample	family_darktrack

Darkcomet family
darkcomet
Darktrack family
darktrack

Detect LockFile payload 1 IoCs

resource	yara_rule
sample	family_lockbit

Detected Mount Locker ransomware 1 IoCs

resource	yara_rule
sample	RANSOM_mountlocker

Joker family
joker
Lockfile family
lockfile

M00nD3v Logger payload 1 IoCs

Detects M00nD3v Logger payload in memory.

infostealer

resource	yara_rule
sample	m00nd3v_logger

M00nd3v_logger family
m00nd3v_logger

MassLogger log file 1 IoCs

Detects a log file produced by MassLogger.

resource	yara_rule
sample	masslogger_log_file

Masslogger family
masslogger

Matiex Main payload 1 IoCs

resource	yara_rule
sample	family_matiex

Matiex family
matiex
Mountlocker family
mountlocker

Shurk Stealer payload 1 IoCs

resource	yara_rule
sample	shurk_stealer

Shurk family
shurk

StormKitty payload 1 IoCs

resource	yara_rule
sample	family_stormkitty

Stormkitty family
stormkitty

File Explorer

0b339883d9d76c11e4b22915fa67303fb4302d9855e219db7e803e693e6fb899.bin

.js 405KB

0b339883d9d76c11e4b22915fa67303fb4302d9855e219db7e803e693e6fb899.bin

SHA256 0b339883d9d76c11e4b22915fa67303fb4302d9855e219db7e803e693e6fb899
MD5 1cbbb572f88a23f55f086b96327fe5e0
SHA1 6d1593368828198dfb5b9eceaab71f49aa535c40
SHA512 dcab6c6025ca9da5301cb6913be35d4285d1ceecc9bd811dfd23727b1b2a14618f3e7a98c18d7a335373c5160c9cb5f62c10f0385387ab7417fc917283981ffd
SSDEEP 3072:WV9Es470kT97kFUxz3mKMACR3R7DyWvEXNemiS0KPMID5whT0bMNj67:dwkwM3zUJtMtwmIj67
MD5 SHA1 SHA512 SSDEEP

AgentTesla payload
DarkTrack payload
Detect LockFile payload
Detected Mount Locker ransomware
M00nD3v Logger payload

Detects M00nD3v Logger payload in memory.

infostealer
MassLogger log file

Detects a log file produced by MassLogger.
Matiex Main payload
Shurk Stealer payload
StormKitty payload