agenttesla | 4be20943911f150300d9eefae7f9f78122db531a6a5f82db1877a503dddf6792

Sharing

Copy URL Twitter E-mail

General

Target
4be20943911f150300d9eefae7f9f78122db531a6a5f82db1877a503dddf6792
Size 200.0MB
Sample240601-cafs6sed99
SHA256 4be20943911f150300d9eefae7f9f78122db531a6a5f82db1877a503dddf6792
MD5 3abd8340019368e270768b7d99397974
SHA1 53ede430bb2e42f40e789dc7d9ea46f226037792
SHA512 cdb5f3ce0dc0c271d8938a422376803910e60471736377b9918f20dd0524eae506e0be2263bbd1f86a167665d5c6e9c19eb1ac715ea543ea4a07c8c911ed5eea
SSDEEP 6291456:gGkFEr0NzLOr5DEz+Sl3L5cIuw0JgMj7CSkREicXxTX//X/5g3Kc6Z/ayM3No35U:zp81kuyCoJwpj0U
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Malware Config

Targets

- Target
  Virussign.2024.05.28/virussign.com_02656be0c5433020bfb542ef96aec4fb.vir
- Size 77KB
- SHA256 f6cd6811e9fa797205a37293cb1d8181af5d8cffc49dcbbff32523341e4ee1dd
- MD5 02656be0c5433020bfb542ef96aec4fb
- SHA1 e8a6476401add6fd9e3c2a7e9ab2ed748087d40b
- SHA512 c5af5cba212fb1e7a2ecbdfe0b8b04aec9bfca4e9fce250a2bd4940fd5d0f720314d1641076652b8d4147697be1e0001557690afaaf4899447c7d48ea7914409
- SSDEEP 1536:HXoKlnzpMyqDQ+IJDDctJUX0DKR+cwpbTthz0gte7kjHsAp7Hxam7YCxZ:3omnzVincQDKgcwpbTjzxjHs04mEg
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral1 behavioral2
- Target
  Virussign.2024.05.28/virussign.com_0295ef39c9efcd747c6ade5619c4ad56.vir
- Size 1.1MB
- SHA256 1d9c8666623498322671bf25b851e8fccd14984226c9cd51ee486d2639aeca63
- MD5 0295ef39c9efcd747c6ade5619c4ad56
- SHA1 7a00047aea8757664ac647fa58a22a21a04f2623
- SHA512 5357a27d47c73d1792bbf30d05e61625cb36c19cb6b4ac1f30a7f8d9060cc4af7951e9b1669fa3bedf4b5d456d74ac1e5caaf840266c078b21d48b38b9e95d16
- SSDEEP 24576:vBF6727uROGdN1cASXv8BoC09aYCmcDff91uO3mnjQBLpuG:rwNU6ff91f2ZG
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral3 behavioral4
- Target
  Virussign.2024.05.28/virussign.com_0311b3d5d35ca088f3c1c928b938679a.vir
- Size 5.7MB
- SHA256 9bade41835f0689af9b441376ec17f53be93201c2ab516e13c1ae4485786f522
- MD5 0311b3d5d35ca088f3c1c928b938679a
- SHA1 9a58005c16bf73f9c68e210629938d8aeb04a26c
- SHA512 408234b6f70df1cd120346678f322f7f841f800cc7cdaba07f5275e0b421b20d7e0c8e4280196c63d2d8ed4b56224e2c9765baa7552ac5af06e9cc89d7c72879
- SSDEEP 98304:uJaUBuEpQU1enCYFzjUm6d00l7957IBZRMA3KSiTMxq:uJeQOml7D7IBZX3EIq
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

risepro stealer
- RisePro
  RisePro stealer is an infostealer distributed by PrivateLoader.
  stealer risepro
behavioral5 behavioral6
- Target
  Virussign.2024.05.28/virussign.com_0368306d6b7ca6f8cd64918f8133523b.vir
- Size 192KB
- SHA256 c6e91a08d84b2229a707ca04949b5bb4c8625afe8db38e7e2f1361150cde70ff
- MD5 0368306d6b7ca6f8cd64918f8133523b
- SHA1 ad32ba3db92c2670f466e718f35d7f6dbe0532e8
- SHA512 95e8fc25e5e4afe8eee972cb4418b6fd990e6f2f27d53d1b0a719a5ad1e3333b8a8b745b8be4469daf3f8b8d112ef75238a596f5d896bbe7377469117d0b3a31
- SSDEEP 3072:E+8rpm1NGmuJB/VguosCXSgzo2SUkqaI:ERmXGmQ9klXSgzoPqa
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral7 behavioral8
- Target
  Virussign.2024.05.28/virussign.com_043499b4166d3ee153156d3583dec4e4.vir
- Size 54KB
- SHA256 801d12f55b8f7ee0dded879d19c0278c0b37d6fe7e331b09c01df776b8fa0a0c
- MD5 043499b4166d3ee153156d3583dec4e4
- SHA1 8f4d2b91413332611e280bc4b43248e5488f768c
- SHA512 23b35b8ad629fccd79c8ad307f27fda150ec2b0eecf7523228204f8ae4f233650835d93d5955787985c4a1d4707924ef5ae92757decc65825ec12728a0f590ab
- SSDEEP 768:v/qu3FG11xvqrIKA/lGK+cZahN/ej+1E1c8X0LJM+UrnVT7rXcEXxnpPjTILXmwy:XqaFJJA/MxOc8kM++ntX7npjki2qJ
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral10 behavioral9
- Target
  Virussign.2024.05.28/virussign.com_052b93dc1be28f132dc9a39bd29e5e1d.vir
- Size 1.5MB
- SHA256 bd612a0812d330fb66d86975dd9c3521322041a8f950807f9010c77135fc47e6
- MD5 052b93dc1be28f132dc9a39bd29e5e1d
- SHA1 b67e82577b7708622e1706e85e0a8ebce6fffd9a
- SHA512 45324d2363c0de3ddd0035ec9d290f45759318db405e90ed043666dc89362f4deb6c91184db0f0efbcea2ce790c95a595b828d02ca25e0dc7607bc5fd0ac3145
- SSDEEP 24576:vBF672l6i2Ncb2ygupgrnACAmZ/NwFC31G3AcMxA7DELKcW7wpebBQLn2IBP3WK6:r56uL3pgrCEdMKPIH2BuEoI4
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral11 behavioral12
- Target
  Virussign.2024.05.28/virussign.com_074ea3c5da360aee1e0b3414dbf54539.vir
- Size 120KB
- SHA256 4ef15b7b0f5baf8c216787d264e26096ceee4c3bcbd6b1a7f3eaa999ad27baa1
- MD5 074ea3c5da360aee1e0b3414dbf54539
- SHA1 fa228d76070d686c23721e3c7e788a9aa776b10a
- SHA512 d9348c803b23175d833274dda6b7b7817f455e19f46464ab19d4c967bff22f835e3a16d23962f8e0b4f99b274facd6d20ec6a4a6178d46c74e430931b2039225
- SSDEEP 3072:w7iwifYhzQ5cMDIHFZqTTeTTTfqTTTJTTTTTnTTTTTThqTTTTTTfLTTTTTTTKTTc:w8fAzQ5cMEHFZlxl
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral13 behavioral14
- Target
  Virussign.2024.05.28/virussign.com_07cf72459cc5d47e610cfd77c669ff96.vir
- Size 948KB
- SHA256 d16b03c0510629468560a402c68d62575c2d336f54e458a137400a0f07952873
- MD5 07cf72459cc5d47e610cfd77c669ff96
- SHA1 29ce34a84f2adcb6b32b2592351c06f5ea3080c2
- SHA512 c3e65185752f53e0e1205fb58838518ab945eac994acb9867edc45c1f041b492d22acc8bce75b93e084107fd2b38913dcd50a921bdce6cd2eda02719e7064e23
- SSDEEP 12288:wqBWCet0qyBxqns0Dk4sHMIV77nMrx8ID9D2fIQzD2i+7Sx6vQQvFeQn9gtqSmpB:vBWelxqsfNMNr79DsIMDlTovQwcq/pSu
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral15 behavioral16
- Target
  Virussign.2024.05.28/virussign.com_0892e5ad95e04e5ae36cd860d2805ec3.vir
- Size 1.1MB
- SHA256 ed2caae6bd9dc1f6bd08d56b4154bc059a094fb477ebba7b2680932b67829801
- MD5 0892e5ad95e04e5ae36cd860d2805ec3
- SHA1 6dce767104f258c2af63fcb12fe71a9ecf988b4a
- SHA512 979bb159ba44e4524298779ea8df72d519b8bddf423d458f92be587b42d08f8acc0a68e08c884a06b0d4963cd937a898c78a795600aef1e17079e0380aec6663
- SSDEEP 24576:vBF672E55I6PFw12TJ1tmyNJeo55TadLHYwU6l5/cyXAU:rF3OioF5qdj
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral17 behavioral18
- Target
  Virussign.2024.05.28/virussign.com_0a1b2a90d5e8d72344de32ea3dde4ea3.vir
- Size 538KB
- SHA256 e411e1f6c3b26a823ea54a00e34d532dcbed668b001c5afdccf6b9ec40b4e001
- MD5 0a1b2a90d5e8d72344de32ea3dde4ea3
- SHA1 9d18788de78485b959c9847d2f648bfdc30814fa
- SHA512 ae1a5492541cb9b2b474cf45afb91d934cdd6a1d1c706cc90094553e43d4ac5e0b623b0d593ba7b9930494863b824effc8c9c317ca5d09377c4568e74dad226e
- SSDEEP 12288:nBEGpXaRLtyR8sSFDQYuqmqU5tcdBnF8Nu1LrUYvl:B3oLoR8lmqUfcv7LrU
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral19 behavioral20
- Target
  Virussign.2024.05.28/virussign.com_0a7fd05e68f391ee6ee6228f2ea2e33e.vir
- Size 494KB
- SHA256 114214eab1d5428deb43f369cf3dcbca83bd22b5428faed33803c52455d348e7
- MD5 0a7fd05e68f391ee6ee6228f2ea2e33e
- SHA1 7878bfbce95a49789bd7f5eb62b0167f984875fc
- SHA512 8eee0c9cf52f64494b043f715004b9d5ff9741daf545c75b865ab18e9ddb9a7c6e5bfcc37294fda9fa1842bd04146f5f177353992d41e5e7850b97676e3e2e65
- SSDEEP 12288:NyAfDcgcTQhgpZBDtoRAG01LqTl2mZoiBD:vDVBADt1ZKlX5
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10
- Executes dropped EXE
- Loads dropped DLL
behavioral21 behavioral22
- Target
  Virussign.2024.05.28/virussign.com_0b56160252b8569ad663460297d4d05e.vir
- Size 2.1MB
- SHA256 93135d78fcbd097423c6b1e41a00a40a490d2400325029a148056757139141b1
- MD5 0b56160252b8569ad663460297d4d05e
- SHA1 720af403a19a812e13542a70280a6ade2e1fd4a4
- SHA512 2251680c4b6058c8d77dcb87e9aa110cd8a5296d64b4ac597b5046f2dd70f0a40b440d2871d164f2268b1486153b11985a9434e72fdc61f191bbd3736822d18d
- SSDEEP 49152:aNGpyds3KRWg3998NAkDqw8RlCS3tyn17j:10dsaRWsULGCOtY7
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral23 behavioral24
- Target
  Virussign.2024.05.28/virussign.com_0c7bc96e68ade9ec9e099fa5320ffaeb.vir
- Size 1.4MB
- SHA256 080e54f619a44bc9e2fe05d4a1c71a9c1edaf505baa47b00e63b021973a7461b
- MD5 0c7bc96e68ade9ec9e099fa5320ffaeb
- SHA1 30d73d46e03d767b68011aa36c7a7d4946531239
- SHA512 12efd84ae5711d46e553d3d9cb29455b525a90f9ed2c81be88e85361748c01b0b56850f77a4155b906c33a3d6674f580441cac7a90478b6f8a1bc0627213c664
- SSDEEP 24576:vBF672l6i2Ncb2ygupgrnACAmZ/NwFC31G3AcMxA7De5qv/k599kS0R6FL1USAWt:r56uL3pgrCEdMeb7FxUOqyX
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral25 behavioral26
- Target
  Virussign.2024.05.28/virussign.com_0d1e8c06c2dc9e2630a1c7791b6b8cac.vir
- Size 1.1MB
- SHA256 cf389e561b2e0e64630f90ab07b8905b6a6cf2d9c65ed2426715764d423856c5
- MD5 0d1e8c06c2dc9e2630a1c7791b6b8cac
- SHA1 e15a7e2b85418a828c811ba68140ff999472d8c0
- SHA512 c4c8e90e2e75c00b9119ecf8b8bc4be20d094dc2d4676b6ab5be8c2d22192088cf2e99c13ba2bc9df1e977a3fceab4f5bd908fb5515880e15d1bafb406f88f98
- SSDEEP 24576:vBF6727HeoPO+XC7A9GaFDnFelw+HT8V1NCgvY8R3E11YtTRt3qAcvVB+PGb:rOYFbewPtq7vVB+P0
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral27 behavioral28
- Target
  Virussign.2024.05.28/virussign.com_0de8f96fc515f258a5f94ab4939f39cd.vir
- Size 1.5MB
- SHA256 677fabdabf6dd1ac67a62108ff77ebc2acb6975790110f48eb71dd32780bf065
- MD5 0de8f96fc515f258a5f94ab4939f39cd
- SHA1 ab60f95ae7af1efe2da2448f7db623d6d3b1f9ff
- SHA512 63d24b95a87f5b40fe5316d44a6161e8c0d40d062b4a65eb5f0c899129dbe24d73bd6580ff112fd854537d85ac0a13466d93b32ce1e6dbb0785937be5407ef08
- SSDEEP 24576:jCrxidr851Xx4QmWTDgRjdZXS+ROeuzbxN97u6WMe20Dz7S8dGDIWP5vQFlC8wuw:JapRzpu6QDzmGTce/ApfVBV
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral29 behavioral30
- Target
  Virussign.2024.05.28/virussign.com_1047fdfbd5456ce5c577c0e6c9f9994f.vir
- Size 2.1MB
- SHA256 cb395f1d7cff35c9303107babd2aa6906b01115ca60875929c9e02dd69a16aa0
- MD5 1047fdfbd5456ce5c577c0e6c9f9994f
- SHA1 8da8b20d8e0047e805830d32edebc61764836333
- SHA512 731c75c2b80774e6922b10e9e8846057efcbefc999a803b4fabfb74ab2907675e0cb45fc09eec9b12226054f62ff02161b461973c4f3acc16802886e28c858bf
- SSDEEP 49152:WIp7hVQ2gczy+/2j7zpPPz8SPhRKSUm+osTmdqQY:WcG2gcuZx78ARvUmLsTmfY
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

RisePro

Executes dropped EXE

Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32