General

  • Target

    Debug.zip

  • Size

    2.0MB

  • MD5

    b4803c71383fe12fd14614f150d87675

  • SHA1

    0280aa5b1a34338f458d5384715aeadd0831e48c

  • SHA256

    83e512ed02d362e56a985d9a217c095e43f9bd43a554c0801fdd71ea939a4eb7

  • SHA512

    57977bc5b2ba5fea89c95a53a05cfc7dfe9b8b6694f0e56e187ca41c540e21cf7f5420dc05303d779a2baa569ed11f3c64177585162600d7e48fac226fe16524

  • SSDEEP

    49152:b0+WBXu421LIb4Wqt/lpVD6G2LdeD+kkHNpHfkoStRtRo2VGg+s:4ulL4z4tWFeCkWPHfERV+s

Score
10/10

Malware Config

Signatures

  • AgentTesla payload 1 IoCs
  • Agenttesla family
  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

Files

  • Debug.zip
    .zip

    Password: 123

  • Debug/CrystalAPI.dll
    .dll windows:4 windows x64 arch:x64

    Password: 123


    Headers

    Sections

  • Debug/Guna.UI2.dll
    .dll windows:4 windows x86 arch:x86

    Password: 123

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Debug/Killua.exe
    .exe windows:4 windows x86 arch:x86

    Password: 123

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Debug/Killua.exe.config
  • Debug/Killua.pdb
  • Debug/LunarAPI.dll
    .dll windows:4 windows x86 arch:x86

    Password: 123

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Debug/Siticone.UI.dll
    .dll windows:4 windows x86 arch:x86

    Password: 123

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Debug/VisualStudioTabControl.dll
    .dll windows:4 windows x86 arch:x86

    Password: 123

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Debug/bin/Monaco/Monaco.html
    .js
  • Debug/bin/Monaco/debug.log
  • Debug/bin/Monaco/vs/MonacoNet.dll
    .dll windows:6 windows x86 arch:x86

    Password: 123

    785d680cbd472fae503fd72ce14d28cb


    Headers

    Imports

    Sections

  • Debug/bin/Monaco/vs/base/worker/workerMain.js
    .js
  • Debug/bin/Monaco/vs/basic-languages/lua/lua.js
  • Debug/bin/Monaco/vs/editor/contrib/suggest/media/String_16x.svg
  • Debug/bin/Monaco/vs/editor/contrib/suggest/media/String_inverse_16x.svg
  • Debug/bin/Monaco/vs/editor/editor.main.css
  • Debug/bin/Monaco/vs/editor/editor.main.js
    .js
  • Debug/bin/Monaco/vs/editor/editor.main.nls.de.js
  • Debug/bin/Monaco/vs/editor/editor.main.nls.es.js
  • Debug/bin/Monaco/vs/editor/editor.main.nls.fr.js
  • Debug/bin/Monaco/vs/editor/editor.main.nls.it.js
  • Debug/bin/Monaco/vs/editor/editor.main.nls.ja.js
  • Debug/bin/Monaco/vs/editor/editor.main.nls.js
  • Debug/bin/Monaco/vs/editor/editor.main.nls.ko.js
  • Debug/bin/Monaco/vs/editor/editor.main.nls.ru.js
  • Debug/bin/Monaco/vs/editor/editor.main.nls.zh-cn.js
  • Debug/bin/Monaco/vs/editor/editor.main.nls.zh-tw.js
  • Debug/bin/Monaco/vs/editor/standalone/browser/quickOpen/symbol-sprite.svg
  • Debug/bin/Monaco/vs/loader.js
    .js
  • Debug/c543dsa312sdjadA2123.exe
    .exe windows:4 windows x86 arch:x86

    Password: 123

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections