agenttesla | 630a2dec95e68275d9ffa75a87d4809a9da69434c30cd95099fa401c9e4c9ebc

Target

630a2dec95e68275d9ffa75a87d4809a9da69434c30cd95099fa401c9e4c9ebc
Size

475KB
MD5

b3466ea07dc83fcce7eeba0dbc1c8aa6
SHA1

1aeee7429327e3241fccddd4b2f06b8e6fb67ab8
SHA256

630a2dec95e68275d9ffa75a87d4809a9da69434c30cd95099fa401c9e4c9ebc
SHA512

f8b4f246112071a91c125ce6384a0b86d6be1b9631801e53e9e4f2b8027b4b5acd9aedf8b4fab7c7dd69e1729f1ef27b2aeea1f940ffceaf8f2abd320fbb57e2
SSDEEP

3072:VVnNs48OW0kT97kFUxj3mKMABR3R7DyWvEXNemiS0KPMID5whT0bMNj69wrVRs3f:nbkw83zLJtMtwmIj6ERCcXhe

Score

10^/10

infostealer miner agenttesla darktrack lockfile m00nd3v_logger matiex modiloader shurk stormkitty surtr vulturi zeppelin masslogger mountlocker xmrig darkcomet

Malware Config

Signatures

AgentTesla payload 1 IoCs

resource	yara_rule
sample	family_agenttesla

Agenttesla family
agenttesla

DarkTrack payload 1 IoCs

resource	yara_rule
sample	family_darktrack

Darkcomet family
darkcomet
Darktrack family
darktrack

Detect LockFile payload 1 IoCs

resource	yara_rule
sample	family_lockfile

Detected Mount Locker ransomware 1 IoCs

resource	yara_rule
sample	RANSOM_mountlocker

Detects Surtr Payload 1 IoCs

resource	yara_rule
sample	family_surtr

Detects Zeppelin payload 1 IoCs

resource	yara_rule
sample	family_zeppelin

Lockfile family
lockfile

M00nD3v Logger payload 1 IoCs

Detects M00nD3v Logger payload in memory.

infostealer

resource	yara_rule
sample	m00nd3v_logger

M00nd3v_logger family
m00nd3v_logger

MassLogger log file 1 IoCs

Detects a log file produced by MassLogger.

resource	yara_rule
sample	masslogger_log_file

Masslogger family
masslogger

Matiex Main payload 1 IoCs

resource	yara_rule
sample	family_matiex

Matiex family
matiex

ModiLoader Second Stage 1 IoCs

resource	yara_rule
sample	modiloader_stage2

Modiloader family
modiloader
Mountlocker family
mountlocker

Shurk Stealer payload 1 IoCs

resource	yara_rule
sample	shurk_stealer

Shurk family
shurk

StormKitty payload 1 IoCs

resource	yara_rule
sample	family_stormkitty

Stormkitty family
stormkitty
Surtr family
surtr
Vulturi family
vulturi

Vulturi payload 1 IoCs

resource	yara_rule
sample	family_vulturi

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	family_xmrig

Xmrig family
xmrig
Zeppelin family
zeppelin

Files

630a2dec95e68275d9ffa75a87d4809a9da69434c30cd95099fa401c9e4c9ebc
.js