agenttesla | 630a2dec95e68275d9ffa75a87d4809a9da69434c30cd95099fa401c9e4c9ebc

Target
630a2dec95e68275d9ffa75a87d4809a9da69434c30cd95099fa401c9e4c9ebc
Size 475KB
Sample240324-d6v4eahc35
SHA256 630a2dec95e68275d9ffa75a87d4809a9da69434c30cd95099fa401c9e4c9ebc
MD5 b3466ea07dc83fcce7eeba0dbc1c8aa6
SHA1 1aeee7429327e3241fccddd4b2f06b8e6fb67ab8
SHA512 f8b4f246112071a91c125ce6384a0b86d6be1b9631801e53e9e4f2b8027b4b5acd9aedf8b4fab7c7dd69e1729f1ef27b2aeea1f940ffceaf8f2abd320fbb57e2
SSDEEP 3072:VVnNs48OW0kT97kFUxj3mKMABR3R7DyWvEXNemiS0KPMID5whT0bMNj69wrVRs3f:nbkw83zLJtMtwmIj6ERCcXhe
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

infostealer miner agenttesla darktrack lockfile m00nd3v_logger matiex modiloader shurk stormkitty surtr vulturi zeppelin masslogger mountlocker xmrig darkcomet

Malware Config

Signatures

AgentTesla payload 1 IoCs

resource	yara_rule
sample	family_agenttesla

Agenttesla family
agenttesla

DarkTrack payload 1 IoCs

resource	yara_rule
sample	family_darktrack

Darkcomet family
darkcomet
Darktrack family
darktrack

Detect LockFile payload 1 IoCs

resource	yara_rule
sample	family_lockfile

Detected Mount Locker ransomware 1 IoCs

resource	yara_rule
sample	RANSOM_mountlocker

Detects Surtr Payload 1 IoCs

resource	yara_rule
sample	family_surtr

Detects Zeppelin payload 1 IoCs

resource	yara_rule
sample	family_zeppelin

Lockfile family
lockfile

M00nD3v Logger payload 1 IoCs

Detects M00nD3v Logger payload in memory.

infostealer

resource	yara_rule
sample	m00nd3v_logger

M00nd3v_logger family
m00nd3v_logger

MassLogger log file 1 IoCs

Detects a log file produced by MassLogger.

resource	yara_rule
sample	masslogger_log_file

Masslogger family
masslogger

Matiex Main payload 1 IoCs

resource	yara_rule
sample	family_matiex

Matiex family
matiex

ModiLoader Second Stage 1 IoCs

resource	yara_rule
sample	modiloader_stage2

Modiloader family
modiloader
Mountlocker family
mountlocker

Shurk Stealer payload 1 IoCs

resource	yara_rule
sample	shurk_stealer

Shurk family
shurk

StormKitty payload 1 IoCs

resource	yara_rule
sample	family_stormkitty

Stormkitty family
stormkitty
Surtr family
surtr
Vulturi family
vulturi

Vulturi payload 1 IoCs

resource	yara_rule
sample	family_vulturi

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	family_xmrig

Xmrig family
xmrig
Zeppelin family
zeppelin

File Explorer

630a2dec95e68275d9ffa75a87d4809a9da69434c30cd95099fa401c9e4c9ebc

.js 475KB

630a2dec95e68275d9ffa75a87d4809a9da69434c30cd95099fa401c9e4c9ebc

SHA256 630a2dec95e68275d9ffa75a87d4809a9da69434c30cd95099fa401c9e4c9ebc
MD5 b3466ea07dc83fcce7eeba0dbc1c8aa6
SHA1 1aeee7429327e3241fccddd4b2f06b8e6fb67ab8
SHA512 f8b4f246112071a91c125ce6384a0b86d6be1b9631801e53e9e4f2b8027b4b5acd9aedf8b4fab7c7dd69e1729f1ef27b2aeea1f940ffceaf8f2abd320fbb57e2
SSDEEP 3072:VVnNs48OW0kT97kFUxj3mKMABR3R7DyWvEXNemiS0KPMID5whT0bMNj69wrVRs3f:nbkw83zLJtMtwmIj6ERCcXhe
MD5 SHA1 SHA512 SSDEEP

AgentTesla payload
DarkTrack payload
Detect LockFile payload
Detected Mount Locker ransomware
Detects Surtr Payload
Detects Zeppelin payload
M00nD3v Logger payload

Detects M00nD3v Logger payload in memory.

infostealer
MassLogger log file

Detects a log file produced by MassLogger.
Matiex Main payload
ModiLoader Second Stage
Shurk Stealer payload
StormKitty payload
Vulturi payload
XMRig Miner payload

miner