5190672[.]zip | Triage

Submit
Reports

Overview

overview

Static

static

1

5190672.exe

windows7-x64

5190672.exe

windows10-2004-x64

Sharing

Static task

static1

Behavioral task

behavioral1

Sample

5190672.exe

Resource

win7-20230220-en

agenttesla collection keylogger persistence spyware stealer trojan

windows7-x64

15 signatures

150 seconds

Behavioral task

behavioral2

Sample

5190672.exe

Resource

win10v2004-20230220-en

agenttesla collection keylogger persistence spyware stealer trojan

windows10-2004-x64

16 signatures

150 seconds

General

Target

5190672.zip
Size

543KB
MD5

5b207618d49abfd8b2d432706f8ebc2c
SHA1

90f74fd3d21a9f09aeb3116dbfc97cd49264686d
SHA256

9711294918a8cc2e424c2bd81b3c81b8f8d939e1c761588399c9fcde7a2d0ec3
SHA512

4026bd0a86d3204ca68089d6901c20d30fd2a31277a7a0ef8ec9045f77ee85a3583b3f598d8a1d57ed1d948aa98633fc7b5c5d3d2a8a9ad527d242415c0acf40
SSDEEP

12288:9/qM4kM4bFhqvxlknCIdkSkpD6a5Csr9YwaM8UaHEKrgEuJsz1rwrMYdFgymR:5lM4bFcknCIdk35CcYwanvr+JrJdFgyi

Score

1^/10

Malware Config

Signatures

Files

5190672.zip
.zip
5190672.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 656KB - Virtual size: 655KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

© 2018-2024

Terms | Privacy