General
-
Target
1b3a73040e35a4aad3694d3d036446d3.bin
-
Size
2.8MB
-
Sample
240327-bqh3ssbh4s
-
MD5
1b3a73040e35a4aad3694d3d036446d3
-
SHA1
9f64debc8f7fe6ffd922073da0f4ed54139ad9c8
-
SHA256
27641498d9b498595cd6a181370f81b1e3b64d7155ff95f012babf362b60b4e2
-
SHA512
f9e3276149ec2e2084b69464002c3c58d519bd32ac3f012f92cdb310af24a597e69e079d1ccc573437f52ef0ab35b07884316b91f7013060e5695964f14a1fd3
-
SSDEEP
49152:ZIMqVJqJIXxNjdCHoE0exs/fV4BgZ/A/M0rIV2yyX/Nn:Z3PIGoy/BgZ/OR80ySn
Static task
static1
Behavioral task
behavioral1
Sample
1b3a73040e35a4aad3694d3d036446d3.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1b3a73040e35a4aad3694d3d036446d3.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
1b3a73040e35a4aad3694d3d036446d3.bin
-
Size
2.8MB
-
MD5
1b3a73040e35a4aad3694d3d036446d3
-
SHA1
9f64debc8f7fe6ffd922073da0f4ed54139ad9c8
-
SHA256
27641498d9b498595cd6a181370f81b1e3b64d7155ff95f012babf362b60b4e2
-
SHA512
f9e3276149ec2e2084b69464002c3c58d519bd32ac3f012f92cdb310af24a597e69e079d1ccc573437f52ef0ab35b07884316b91f7013060e5695964f14a1fd3
-
SSDEEP
49152:ZIMqVJqJIXxNjdCHoE0exs/fV4BgZ/A/M0rIV2yyX/Nn:Z3PIGoy/BgZ/OR80ySn
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla payload
-
.NET Reactor proctector
Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.
-