Overview

overview

10

Static

static

10

Guna.UI2.dll

windows7-x64

1

Guna.UI2.dll

windows10-2004-x64

1

HtmlAgilityPack.dll

windows7-x64

1

HtmlAgilityPack.dll

windows10-2004-x64

1

Newtonsoft.Json.dll

windows7-x64

1

Newtonsoft.Json.dll

windows10-2004-x64

1

Valhalla.exe

windows7-x64

10

Valhalla.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Valhalla.rar

  • Size

    2.7MB

  • Sample

    240522-dnn75sae3z

  • MD5

    fe8b75d090918d0542f1b33a19074397

  • SHA1

    1e558d33f5edc25e6fe15180f3db67734b4d3440

  • SHA256

    9e2c0955a2c6552770f089bfa9f077b31a1ba295b2e22c6f931705464333c315

  • SHA512

    19d310beaa47479a7258e5836d3115e0e4995f2ab0e39f2a57d6730f657a8e7e467b8d0fa9fdabec70d2be78c8ae4875838e210d455acc7ddb06266621c399ee

  • SSDEEP

    49152:2odDgfzq2Cku45PmY4AmQ//ISsIIHFHhMJOF4o1pPRRLT+0b:2Ec3CyOsmAR8HFHhoOF4Q7

Score
10/10
agentteslakeyloggerspywarestealertrojan

Malware Config

Targets

    • Target

      Guna.UI2.dll

    • Size

      2.1MB

    • MD5

      c19e9e6a4bc1b668d19505a0437e7f7e

    • SHA1

      73be712aef4baa6e9dabfc237b5c039f62a847fa

    • SHA256

      9ac8b65e5c13292a8e564187c1e7446adc4230228b669383bd7b07035ab99a82

    • SHA512

      b6cd0af436459f35a97db2d928120c53d3691533b01e4f0e8b382f2bd81d9a9a2c57e5e2aa6ade9d6a1746d5c4b2ef6c88d3a0cf519424b34445d0d30aab61de

    • SSDEEP

      49152:6QNztBO2+VN7N3HtnPhx70ZO4+CPXOn5PThDH2TBeHjvjiBckYf+Yh/FJ3:6Ahck2z

    Score
    1/10
    behavioral1behavioral2

    • Target

      HtmlAgilityPack.dll

    • Size

      167KB

    • MD5

      0f64d6db86e6862eaaaa60d88d84db6b

    • SHA1

      51f532b7da79a985e17070615dcdbd621d54b20a

    • SHA256

      84af2aade3e2d691f58d44c5062fbd1573c6c1340cd3b5d401d79591abcd2c30

    • SHA512

      a6133d59899de43849ab17771a95b9e2c17014718baa8df6d4e76e2817306344de2cfff24b2b62024f6b1321a5ce26f97dbf5475658e7f0b27a18585cbc75000

    • SSDEEP

      3072:0abVqfjVB6VG0i/2k1aWE/9N4p+DKyNnppnyZEeSeY0F1ZegW+wFZ/C:XWWG0i/2k1aWE1NWwKyNCZEowFt

    Score
    1/10
    behavioral3behavioral4

    • Target

      Newtonsoft.Json.dll

    • Size

      695KB

    • MD5

      195ffb7167db3219b217c4fd439eedd6

    • SHA1

      1e76e6099570ede620b76ed47cf8d03a936d49f8

    • SHA256

      e1e27af7b07eeedf5ce71a9255f0422816a6fc5849a483c6714e1b472044fa9d

    • SHA512

      56eb7f070929b239642dab729537dde2c2287bdb852ad9e80b5358c74b14bc2b2dded910d0e3b6304ea27eb587e5f19db0a92e1cbae6a70fb20b4ef05057e4ac

    • SSDEEP

      12288:GBja5bBvR8Q0TE2HB0WLmvXbsVG1Gw03RzxNHgKhwFBkjSHXP36RMGy1NqTUO:GBjk38WuBcAbwoA/BkjSHXP36RMG/

    Score
    1/10
    behavioral5behavioral6

    • Target

      Valhalla.exe

    • Size

      2.8MB

    • MD5

      ae1d2fccf71b461a1ef6858d44f1ea2d

    • SHA1

      ab31f301d14ffa3fd81e1b942db7f98c0b8d96f7

    • SHA256

      d43381039f61f85a8ac41e951ae0c399faaacb6b381769456cb23f3dc04ded50

    • SHA512

      0205926b299ab3dafbcd55bf7b96f6870b4f797182996671024f656cf58fc42622140d7946d27409f580c8f033375c5104ba3daec1bc8af828614f9b805e9df8

    • SSDEEP

      49152:ff/Jm2vkRIjsJWJuB3jluCQ1ud1mb2RQzl4wRScOtImKLh1:ngckRIaDB3jlq9bAQzl4wIy1

    Score
    10/10
    agentteslakeyloggerspywarestealertrojan
    behavioral7behavioral8

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks