General
-
Target
783f22d3f808a135871ff9a96877de2ffdb916e914010f8dfb23d1dd2c103f06
-
Size
321KB
-
Sample
221207-n76xeaee29
-
MD5
bf32f23a87b64a238e5050844edec9b7
-
SHA1
c0a83fef7da08a4dc99d510b9d55aad00e4e549e
-
SHA256
783f22d3f808a135871ff9a96877de2ffdb916e914010f8dfb23d1dd2c103f06
-
SHA512
a44efd51335fa4ad2e198fdf58ed5be39d62c01c811ceb12f954908fcb87459e5d9e935dac481e0bfefff4158e89e29d6d3b0519137486d0feaed9bf064a2621
-
SSDEEP
6144:QBn1VOu62SslcNRnuYrfQ6m/E07z5r6ZlASnb0e52:gVJYsGTuQQ6mMUZ4lAQbX52
Static task
static1
Behavioral task
behavioral1
Sample
783f22d3f808a135871ff9a96877de2ffdb916e914010f8dfb23d1dd2c103f06.exe
Resource
win10v2004-20221111-en
Malware Config
Targets
-
-
Target
783f22d3f808a135871ff9a96877de2ffdb916e914010f8dfb23d1dd2c103f06
-
Size
321KB
-
MD5
bf32f23a87b64a238e5050844edec9b7
-
SHA1
c0a83fef7da08a4dc99d510b9d55aad00e4e549e
-
SHA256
783f22d3f808a135871ff9a96877de2ffdb916e914010f8dfb23d1dd2c103f06
-
SHA512
a44efd51335fa4ad2e198fdf58ed5be39d62c01c811ceb12f954908fcb87459e5d9e935dac481e0bfefff4158e89e29d6d3b0519137486d0feaed9bf064a2621
-
SSDEEP
6144:QBn1VOu62SslcNRnuYrfQ6m/E07z5r6ZlASnb0e52:gVJYsGTuQQ6mMUZ4lAQbX52
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Executes dropped EXE
-
Suspicious use of SetThreadContext
-