General
-
Target
5b8f2248152e36e0c0866459716d7a0e.bin
-
Size
835KB
-
Sample
231211-caldnabbe8
-
MD5
5b8f2248152e36e0c0866459716d7a0e
-
SHA1
6658fceac9f047e15a156d7590a3846f19aa4621
-
SHA256
e3b0e6c91a76819316f4f7b4b9ce4fee1a16dee415c299f266f54598046fff8a
-
SHA512
033570605dce7d3ca7b117287fcaf04f0bc149e76722a625940bdf922032fcdbc918582bddab65147eedc685ba428f8ec03f75dd3f9cfc84350b9fcdbfadea5b
-
SSDEEP
24576:XrATxdDgfzEJXGTGkW1D8dH7qgqEm+k2tjnHx:7odDgfzq2Cku45Pm+kyx
Behavioral task
behavioral1
Sample
xd/Guna.UI2.dll
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
xd/Guna.UI2.dll
Resource
win10v2004-20231127-en
Behavioral task
behavioral3
Sample
xd/SubZero.exe
Resource
win7-20231023-en
Behavioral task
behavioral4
Sample
xd/SubZero.exe
Resource
win10v2004-20231130-en
Malware Config
Targets
-
-
Target
xd/Guna.UI2.dll
-
Size
2.1MB
-
MD5
c19e9e6a4bc1b668d19505a0437e7f7e
-
SHA1
73be712aef4baa6e9dabfc237b5c039f62a847fa
-
SHA256
9ac8b65e5c13292a8e564187c1e7446adc4230228b669383bd7b07035ab99a82
-
SHA512
b6cd0af436459f35a97db2d928120c53d3691533b01e4f0e8b382f2bd81d9a9a2c57e5e2aa6ade9d6a1746d5c4b2ef6c88d3a0cf519424b34445d0d30aab61de
-
SSDEEP
49152:6QNztBO2+VN7N3HtnPhx70ZO4+CPXOn5PThDH2TBeHjvjiBckYf+Yh/FJ3:6Ahck2z
Score1/10 -
-
-
Target
xd/SubZero.exe
-
Size
319KB
-
MD5
5a61563e97a4e56c6870a00db97988eb
-
SHA1
57232a44231784491c5c5b275d0b6107cd831f98
-
SHA256
ff96a31b316b7ace965bc78842f2bf1f7dd7c91edc19533c5d259814cb75ca40
-
SHA512
a88fd3b775ffded2730aac41b92e2a1d2a23c2fb9c2ccaf004cc6d82ede98bc96191ecefed5f055c30746c66af367559a3ed2544d31e5d61fd55f7ab8c0bd33f
-
SSDEEP
6144:VVQZkA+SvitWJAlAiLcW7tdlAiLcW7tBWJqPVHq:VWIJ0JlW7tgW7tQJII
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla payload
-