General
- Target Invoice.exe
- Size 64KB
- Sample230209-mpd81agg55
- SHA256 fca4fad8a97a71ab6192b8e54c42ed6469f20c41fcde73dc270ffcafae9495f0
- MD5 7550fa07706e7920d4fc819f330212d2
- SHA1 57383d74517e6bedc6229c9921d2648ffa1271d6
- SHA512 f0ce42eedc505052a417c636991bef93441054b3be554047c5d7165c6760027ba0547bc6abff2bc6120c4cd4ea1553f6ce59af6d0264c0edc515f39a835585a8
- SSDEEP 768:pkOyF9AKzwzsaV4pl3F9F/Rix40LO6dusn04eF:eOe9AAwwaVk3FR+40ymuL3F
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
Invoice.exe
Resource
win7-20221111-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
Invoice.exe
Resource
win10v2004-20221111-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target Invoice.exe
- Size 64KB
- SHA256 fca4fad8a97a71ab6192b8e54c42ed6469f20c41fcde73dc270ffcafae9495f0
- MD5 7550fa07706e7920d4fc819f330212d2
- SHA1 57383d74517e6bedc6229c9921d2648ffa1271d6
- SHA512 f0ce42eedc505052a417c636991bef93441054b3be554047c5d7165c6760027ba0547bc6abff2bc6120c4cd4ea1553f6ce59af6d0264c0edc515f39a835585a8
- SSDEEP 768:pkOyF9AKzwzsaV4pl3F9F/Rix40LO6dusn04eF:eOe9AAwwaVk3FR+40ymuL3F
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Uses the VBS compiler for execution
-
Suspicious use of SetThreadContext