Overview

overview

10

Static

static

10

Protect.rar

windows7-x64

3

Protect.rar

windows10-2004-x64

3

Protect/Co...on.dll

windows7-x64

1

Protect/Co...on.dll

windows10-2004-x64

1

Protect/Core.dll

windows7-x64

1

Protect/Core.dll

windows10-2004-x64

1

Protect/Co...config

windows7-x64

3

Protect/Co...config

windows10-2004-x64

3

Protect/Custom.txt

windows7-x64

1

Protect/Custom.txt

windows10-2004-x64

1

Protect/Guna.UI2.dll

windows7-x64

1

Protect/Guna.UI2.dll

windows10-2004-x64

1

Protect/Hardening.dll

windows7-x64

1

Protect/Hardening.dll

windows10-2004-x64

1

Protect/Ha...config

windows7-x64

3

Protect/Ha...config

windows10-2004-x64

3

Protect/Runtime.dll

windows7-x64

1

Protect/Runtime.dll

windows10-2004-x64

1

Protect/SE...config

windows7-x64

3

Protect/SE...config

windows10-2004-x64

3

Protect/Saved.txt

windows7-x64

1

Protect/Saved.txt

windows10-2004-x64

1

Protect/VMUtils.dll

windows7-x64

1

Protect/VMUtils.dll

windows10-2004-x64

1

Protect/Webhook.txt

windows7-x64

1

Protect/Webhook.txt

windows10-2004-x64

1

Protect/bi...IT.exe

windows7-x64

10

Protect/bi...IT.exe

windows10-2004-x64

10

Protect/dnlib.dll

windows7-x64

1

Protect/dnlib.dll

windows10-2004-x64

1

Protect/dnlib.xml

windows7-x64

1

Protect/dnlib.xml

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Protect.rar

  • Size

    2.9MB

  • MD5

    3b2cbe7b708cc29f9bd6131bb5f713f7

  • SHA1

    748d27ad13d0216f924735317be579ff7adcaa20

  • SHA256

    1d8c80f52a16666330f204788cc9eb42d0439a4ff81ae39ffdf3ad3103751366

  • SHA512

    3565f70813adbfb06226a26ecd66fb068c03b7a17565bafa5ef507ca49a839d6cff053a682ce27eab25b9a817e5b794bd25dac2b31172b7e8708679eec1f2303

  • SSDEEP

    49152:I5Bdkfblp10z/MDhhEEJrneobhInah3edweoDfkOJxm/zDrTUwjzNpOBOzm0:I5BslPKMDhhrVnNS0ew5Ds3zDUwPjOM3

Score
10/10
agenttesla

Malware Config

Signatures

  • AgentTesla payload 1 IoCs
  • Agenttesla family
    agenttesla
  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

Files

  • Protect.rar
    .rar
  • Protect/CodeEncryption.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Protect/Core.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Protect/Core.dll.config
  • Protect/Custom.txt
  • Protect/Guna.UI2.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Protect/Hardening.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Protect/Hardening.dll.config
  • Protect/Runtime.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Protect/SECURE BYTE GUI.exe.config
  • Protect/Saved.txt
  • Protect/VMUtils.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Protect/Webhook.txt
  • Protect/bimno1-JIT.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Protect/dnlib.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Protect/dnlib.xml
    .xml