General
-
Target
£88 AntiVirus.zip
-
Size
948KB
-
Sample
240427-1dmynahc8x
-
MD5
59b7f1942aab1dd8fb855f3f83257c75
-
SHA1
dcacf37a2d5f5e452a0df906ca422d0bd0785299
-
SHA256
f3b3b009cda00074a00cf9670754fd3aa1d66708cab003dbd1f3982b0fe62704
-
SHA512
520e6791bcfa963d2c539d9c734e0a3f994df911c4464b540830edca1445020b8bd06406b8ef2bf54257bbd8917abb49693ad7a61b7c81672f0307d1efd55bff
-
SSDEEP
24576:X0TrohXsmtWkPAL8N9Bs8YqGyWSBrsp/TyJrD:ETreXTWkPAL2ZYMYp0D
Behavioral task
behavioral1
Sample
Guna.UI2.dll
Resource
win11-20240419-en
Behavioral task
behavioral2
Sample
88 AntiVirus.exe
Resource
win11-20240426-en
Malware Config
Targets
-
-
Target
Guna.UI2.dll
-
Size
2.1MB
-
MD5
c19e9e6a4bc1b668d19505a0437e7f7e
-
SHA1
73be712aef4baa6e9dabfc237b5c039f62a847fa
-
SHA256
9ac8b65e5c13292a8e564187c1e7446adc4230228b669383bd7b07035ab99a82
-
SHA512
b6cd0af436459f35a97db2d928120c53d3691533b01e4f0e8b382f2bd81d9a9a2c57e5e2aa6ade9d6a1746d5c4b2ef6c88d3a0cf519424b34445d0d30aab61de
-
SSDEEP
49152:6QNztBO2+VN7N3HtnPhx70ZO4+CPXOn5PThDH2TBeHjvjiBckYf+Yh/FJ3:6Ahck2z
Score1/10 -
-
-
Target
88 AntiVirus.exe
-
Size
451KB
-
MD5
a2e87a7c6ecd8ac0796667cc612bb61b
-
SHA1
d581ef5bc0518832b59115cd0a47b6f669ebd51c
-
SHA256
42134c7534f30a683ad5c1e1157367ced6360598a33e24b2343c2548b897c183
-
SHA512
a4c2000b5dc8eca851efedafee056487ced4210b06146d73aa50892a00e4e1c1e4185cb3037b0e3036be37bf5b48f30cb9c24fdcb30abcd1aeb140c5f5211982
-
SSDEEP
6144:hPkUwb08T2rqj7hT2rqj7hT2rqj7KMs7Xq0KELwb0:hPiSrqsrqsrqCMiXqB1
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla payload
-