General
- Target Skelly V2.exe
- Size 2.5MB
- Sample240520-bjasvach71
- SHA256 1a8da34980844838bce5efb93589edfd9c1a0a3d7243534544938c236f656c1d
- MD5 b1262cd5f134c61ba3b077f309a843b8
- SHA1 edaa655070619975f80590ffbd1cfab0c74c678f
- SHA512 9daf4325e148a52f586f4649f53b8b965f62d80f47c8fe69bab4d2f6f3324e2f3420b88972dc0c7714d8dfa844cea476024482a3fd7c9cb464e0969e45404219
- SSDEEP 49152:V92xyXxkYR0RXagDvjWj+0gR8NIpYc7s6cLVSUrRvUkM1Ku6bOOQ:z2xy+YzgHI+0gi2Yc7vcLM5su6K7
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
Skelly V2.exe
Resource
win7-20240215-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target Skelly V2.exe
- Size 2.5MB
- SHA256 1a8da34980844838bce5efb93589edfd9c1a0a3d7243534544938c236f656c1d
- MD5 b1262cd5f134c61ba3b077f309a843b8
- SHA1 edaa655070619975f80590ffbd1cfab0c74c678f
- SHA512 9daf4325e148a52f586f4649f53b8b965f62d80f47c8fe69bab4d2f6f3324e2f3420b88972dc0c7714d8dfa844cea476024482a3fd7c9cb464e0969e45404219
- SSDEEP 49152:V92xyXxkYR0RXagDvjWj+0gR8NIpYc7s6cLVSUrRvUkM1Ku6bOOQ:z2xy+YzgHI+0gi2Yc7vcLM5su6K7
- MD5 SHA1 SHA512 SSDEEP
-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla payload
-
Obfuscated with Agile.Net obfuscator
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.