General
- Target GHOST SPOOFER TEMP + PERM.exe
- Size 233.0MB
- Sample240607-pkl46agh72
- SHA256 02398a3c1da9135f419c3fb75668d2fbe3a6249525fe8862b004e623be836995
- MD5 aacbf527dc7bc602165ffec8b1667697
- SHA1 ad8b0f2e7df87641f78fdf281c96b5ddd5802737
- SHA512 c0bf2e61beb77fbdc02c265b2d7c1bce45e2bb87edd036d3c35779b41054714d1777be51a89e0757f13cfa86d359fac1127f907e02c910600b818a9b99f8da78
- SSDEEP 1572864:1xcR+xcR+xcRvxQxcRyNCzxcR+xcR+xcRvxQxcRyqh:TcCcCcLmcMwFcCcCcLmcM4
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
GHOST SPOOFER TEMP + PERM.exe
Resource
win7-20240220-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
GHOST SPOOFER TEMP + PERM.exe
Resource
win10v2004-20240226-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target GHOST SPOOFER TEMP + PERM.exe
- Size 233.0MB
- SHA256 02398a3c1da9135f419c3fb75668d2fbe3a6249525fe8862b004e623be836995
- MD5 aacbf527dc7bc602165ffec8b1667697
- SHA1 ad8b0f2e7df87641f78fdf281c96b5ddd5802737
- SHA512 c0bf2e61beb77fbdc02c265b2d7c1bce45e2bb87edd036d3c35779b41054714d1777be51a89e0757f13cfa86d359fac1127f907e02c910600b818a9b99f8da78
- SSDEEP 1572864:1xcR+xcR+xcRvxQxcRyNCzxcR+xcR+xcRvxQxcRyqh:TcCcCcLmcMwFcCcCcLmcM4
- MD5 SHA1 SHA512 SSDEEP
Score10/10AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
AgentTesla payload
Legitimate hosting services abused for malware hosting/C2