General
-
Target
LAZONE.exe
-
Size
3.2MB
-
Sample
231206-nrl73aed54
-
MD5
5bcc80236183d7afb6ba78d532177591
-
SHA1
da5a82b133187b52451769a2d3a117fe339aead8
-
SHA256
ac11f5fb4ba0171617515f053860d994ac273954c1322b91858ea85ee2ee5a84
-
SHA512
c219af3938e9f1bd5e9eef71616fff8eed2ca4316b19f4f2056a66150b04cb02a7cd9153eeb736207878f965233268f0fe43d696c0a36b1f876398b82fee17de
-
SSDEEP
98304:YK6jmkyr1UrBGgNexQIT4bNJFY3OqtHWMkQ:YHLy2I2jBHY3WY
Static task
static1
Behavioral task
behavioral1
Sample
LAZONE.exe
Resource
win7-20231129-ja
Behavioral task
behavioral2
Sample
LAZONE.exe
Resource
win10v2004-20231130-ja
Malware Config
Targets
-
-
Target
LAZONE.exe
-
Size
3.2MB
-
MD5
5bcc80236183d7afb6ba78d532177591
-
SHA1
da5a82b133187b52451769a2d3a117fe339aead8
-
SHA256
ac11f5fb4ba0171617515f053860d994ac273954c1322b91858ea85ee2ee5a84
-
SHA512
c219af3938e9f1bd5e9eef71616fff8eed2ca4316b19f4f2056a66150b04cb02a7cd9153eeb736207878f965233268f0fe43d696c0a36b1f876398b82fee17de
-
SSDEEP
98304:YK6jmkyr1UrBGgNexQIT4bNJFY3OqtHWMkQ:YHLy2I2jBHY3WY
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla payload
-