Static task
static1
Behavioral task
behavioral1
Sample
IMG_7001802.exe
Resource
win10-20240404-en
Behavioral task
behavioral2
Sample
IMG_7001802.exe
Resource
win10-20240404-en
General
-
Target
7z - EXE - Tesla.eml
-
Size
224KB
-
MD5
534e076e8f9a77fcf86f2d14df93e15f
-
SHA1
75f4aebeee18d7b725a13421744e84d218dfeceb
-
SHA256
6aa6dc8cb106896a57ff0addebc47e1493c20f954ce2887541bdbdbcfa6c54ee
-
SHA512
87c27cc0ada87d4c45d608c0277f287e5f3f22fda55e2c4ee82a8565fddccf1fdcd680d1e9449fc198fd9062288952a2876c91e9f379209b91e8f830d0ccc489
-
SSDEEP
6144:tXepk/zFg4pONwohERsfvA+Dipk/zFg4pONwohERsfvA+Dp:3/zFDcNwWn1Dp/zFDcNwWn1Dp
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack002/IMG_7001802.exe unpack003/IMG_7001802.exe
Files
-
7z - EXE - Tesla.eml.eml
-
https://croxos.s3.ap-southeast-2.amazonaws.com/[email protected]
-
-
IMG_7001802 (1).7z.7z
-
IMG_7001802.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 200KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
IMG_7001802 (2).7z.7z
-
IMG_7001802.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 200KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
email-html-1.txt.html