General
-
Target
Free Skinchanger by .exe
-
Size
10.8MB
-
Sample
240429-sa2zeadg2y
-
MD5
89d924c09797e784a4c4b9258f63d30d
-
SHA1
e2a3482a93f3b1c5ffcb434fc83569a8ed5e0135
-
SHA256
5d958407dbf9792b8637e82e3ca41554aa1dbda9a9bbd775a109a0d155c8e841
-
SHA512
a7ad67e9545f2e2fb95eb96cb47006ff90980d183aa888991c66717d0dbd5cd83b096866490154a47436c0671c46f04400a41e02446586e3003d21ad94a8b031
-
SSDEEP
196608:LNDOsefRpRLkgkmmTDN4QHfviMI4Qq+gCxipkdjjBHYMw:LNDb6PpKi6Iq+MqdXB7w
Static task
static1
Malware Config
Targets
-
-
Target
Free Skinchanger by .exe
-
Size
10.8MB
-
MD5
89d924c09797e784a4c4b9258f63d30d
-
SHA1
e2a3482a93f3b1c5ffcb434fc83569a8ed5e0135
-
SHA256
5d958407dbf9792b8637e82e3ca41554aa1dbda9a9bbd775a109a0d155c8e841
-
SHA512
a7ad67e9545f2e2fb95eb96cb47006ff90980d183aa888991c66717d0dbd5cd83b096866490154a47436c0671c46f04400a41e02446586e3003d21ad94a8b031
-
SSDEEP
196608:LNDOsefRpRLkgkmmTDN4QHfviMI4Qq+gCxipkdjjBHYMw:LNDb6PpKi6Iq+MqdXB7w
-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla payload
-
Downloads MZ/PE file
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Loads dropped DLL
-