General
- Target 02733354b801cdf3f1770a0e9dee66f4b578241105d9ef15117e7bdb1abcad53.exe
- Size 1.1MB
- Sample240510-mchewscc93
- SHA256 02733354b801cdf3f1770a0e9dee66f4b578241105d9ef15117e7bdb1abcad53
- MD5 55f25b3ea6de1642b9aa771002b54c5b
- SHA1 929f1c5b44b54293a657f4abb5573746878d3cb8
- SHA512 6770fb0a25426f3070c018d23e6b1c6e6e77999ac6b8e0d8e233f1285c73d3602268f6b2f276e230be8a29673007cb8e9aad6c3783c6946d5fb4384c4e106441
- SSDEEP 24576:yqDEvCTbMWu7rQYlBQcBiT6rprG8aZ3YH1Rckm2bXNT:yTvC/MTQYxsWR7aZ3Y3HT
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
02733354b801cdf3f1770a0e9dee66f4b578241105d9ef15117e7bdb1abcad53.exe
Resource
win7-20240419-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
02733354b801cdf3f1770a0e9dee66f4b578241105d9ef15117e7bdb1abcad53.exe
Resource
win10v2004-20240508-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 02733354b801cdf3f1770a0e9dee66f4b578241105d9ef15117e7bdb1abcad53.exe
- Size 1.1MB
- SHA256 02733354b801cdf3f1770a0e9dee66f4b578241105d9ef15117e7bdb1abcad53
- MD5 55f25b3ea6de1642b9aa771002b54c5b
- SHA1 929f1c5b44b54293a657f4abb5573746878d3cb8
- SHA512 6770fb0a25426f3070c018d23e6b1c6e6e77999ac6b8e0d8e233f1285c73d3602268f6b2f276e230be8a29673007cb8e9aad6c3783c6946d5fb4384c4e106441
- SSDEEP 24576:yqDEvCTbMWu7rQYlBQcBiT6rprG8aZ3YH1Rckm2bXNT:yTvC/MTQYxsWR7aZ3Y3HT
- MD5 SHA1 SHA512 SSDEEP
-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Detect ZGRat V1
-
Adds Run key to start application
-
Suspicious use of SetThreadContext