General
-
Target
0a5a2ee74e0f5a100bc8a6d0adffca21961eb73317d22bf4c06695862915bf66
-
Size
1.4MB
-
Sample
240512-bqlhxscf59
-
MD5
9444d59e180ea1c6ba3620a933621a53
-
SHA1
a370c86050cc1bbd3088ce8d8a5e2d61c0710b21
-
SHA256
0a5a2ee74e0f5a100bc8a6d0adffca21961eb73317d22bf4c06695862915bf66
-
SHA512
0a96120998f996c316ebc959e8c267a4d1085b65bf292f1d6594903fdf4194fb57c2bce882a1629b87744bd06406c369a69cece59cc0d812a02e128af06668e9
-
SSDEEP
24576:LqDEvCTbMWu7rQYlBQcBiT6rprG8aSUAFE3njbClY66mproXmy:LTvC/MTQYxsWR7aSUKE3nKl7H0X
Static task
static1
Behavioral task
behavioral1
Sample
0a5a2ee74e0f5a100bc8a6d0adffca21961eb73317d22bf4c06695862915bf66.exe
Resource
win7-20240221-en
Malware Config
Targets
-
-
Target
0a5a2ee74e0f5a100bc8a6d0adffca21961eb73317d22bf4c06695862915bf66
-
Size
1.4MB
-
MD5
9444d59e180ea1c6ba3620a933621a53
-
SHA1
a370c86050cc1bbd3088ce8d8a5e2d61c0710b21
-
SHA256
0a5a2ee74e0f5a100bc8a6d0adffca21961eb73317d22bf4c06695862915bf66
-
SHA512
0a96120998f996c316ebc959e8c267a4d1085b65bf292f1d6594903fdf4194fb57c2bce882a1629b87744bd06406c369a69cece59cc0d812a02e128af06668e9
-
SSDEEP
24576:LqDEvCTbMWu7rQYlBQcBiT6rprG8aSUAFE3njbClY66mproXmy:LTvC/MTQYxsWR7aSUKE3nKl7H0X
-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Detect ZGRat V1
-
Suspicious use of SetThreadContext
-