General

  • Target

    KLN_MARKET.zip

  • Size

    1.7MB

  • MD5

    01ee7da20c542919667f3c5b08d00144

  • SHA1

    baf918e5ff5076afbb004f466cb20da82960aff8

  • SHA256

    d913a8b769f15f990535d033b50189f04378290cf0c44e58926980eae27459da

  • SHA512

    4adcbaa9cf2fdb81244b01673d54773d32a17640f8add4116a51d1d8ff7f336650351e007b0a237820f40264663fd0de21bfcb0d0458e09e4320f1d6158094da

  • SSDEEP

    49152:POT3E0wxGBedY5/b3U5gWAkkx/HZSBkjTuE:Pc3En+/exAkkxPEm/

Score
10/10

Malware Config

Signatures

  • AgentTesla payload 1 IoCs
  • Agenttesla family
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • KLN_MARKET.zip
    .zip
  • Guna.UI2.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Launcher.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • addons/clean.exe
    .exe windows:4 windows x64 arch:x64

    f326f88ca83c9aacaa44acfb8884f1d4


    Headers

    Imports

    Sections

  • addons/x64.exe
    .exe windows:6 windows x64 arch:x64

    5a2c84a5260790d472a85131661b7356


    Headers

    Imports

    Sections