agenttesla | 0b339883d9d76c11e4b22915fa67303fb4302d9855e219db7e803e693e6fb899[.]bin

Resubmissions

31-03-2023 17:36

230331-v63lxsdd7x 10

21-03-2023 11:45

230321-nwr9waaa97 10

25-02-2023 13:19

230225-qkzwpada7y 10

18-07-2022 10:42

220718-mrnkfsbeh3 10

Sharing

Copy URL

Twitter E-mail

General

Target

0b339883d9d76c11e4b22915fa67303fb4302d9855e219db7e803e693e6fb899.bin
Size

405KB
MD5

1cbbb572f88a23f55f086b96327fe5e0
SHA1

6d1593368828198dfb5b9eceaab71f49aa535c40
SHA256

0b339883d9d76c11e4b22915fa67303fb4302d9855e219db7e803e693e6fb899
SHA512

dcab6c6025ca9da5301cb6913be35d4285d1ceecc9bd811dfd23727b1b2a14618f3e7a98c18d7a335373c5160c9cb5f62c10f0385387ab7417fc917283981ffd
SSDEEP

3072:WV9Es470kT97kFUxz3mKMACR3R7DyWvEXNemiS0KPMID5whT0bMNj67:dwkwM3zUJtMtwmIj67

Score

10^/10

infostealer agenttesla darktrack lockfile m00nd3v_logger matiex shurk stormkitty surtr vulturi zeppelin masslogger mountlocker darkcomet

Malware Config

Signatures

AgentTesla payload 1 IoCs

Processes:

resource	yara_rule
sample	family_agenttesla

Agenttesla family
agenttesla

DarkTrack payload 1 IoCs

Processes:

resource	yara_rule
sample	family_darktrack

Darkcomet family
darkcomet
Darktrack family
darktrack

Detect LockFile payload 1 IoCs

Processes:

resource	yara_rule
sample	family_lockfile

Detected Mount Locker ransomware 1 IoCs

Processes:

resource	yara_rule
sample	RANSOM_mountlocker

Detects Surtr Payload 1 IoCs

Processes:

resource	yara_rule
sample	family_surtr

Detects Zeppelin payload 1 IoCs

Processes:

resource	yara_rule
sample	family_zeppelin

Lockfile family
lockfile

M00nD3v Logger payload 1 IoCs

Detects M00nD3v Logger payload in memory.

infostealer

Processes:

resource	yara_rule
sample	m00nd3v_logger

M00nd3v_logger family
m00nd3v_logger

MassLogger log file 1 IoCs

Detects a log file produced by MassLogger.

Processes:

resource	yara_rule
sample	masslogger_log_file

Masslogger family
masslogger

Matiex Main payload 1 IoCs

Processes:

resource	yara_rule
sample	family_matiex

Matiex family
matiex
Mountlocker family
mountlocker

Shurk Stealer payload 1 IoCs

Processes:

resource	yara_rule
sample	shurk_stealer

Shurk family
shurk

StormKitty payload 1 IoCs

Processes:

resource	yara_rule
sample	family_stormkitty

Stormkitty family
stormkitty
Surtr family
surtr
Vulturi family
vulturi

Vulturi payload 1 IoCs

Processes:

resource	yara_rule
sample	family_vulturi

Zeppelin family
zeppelin

Files

0b339883d9d76c11e4b22915fa67303fb4302d9855e219db7e803e693e6fb899.bin
.js