General
- Target RFQ-00001713-223.exe
- Size 1.3MB
- Sample240614-adnbbawhpe
- SHA256 b6aac27c09becec83d3a864b4fb638abbeb0ca0f86b52f800eb331b835795975
- MD5 766e401968d6d1e9a663259d699fd564
- SHA1 32ef00c41a443f3863aa334cd597f187ebf8db1f
- SHA512 447b09f82e5e4cff326b42caf80cdea34b2f9d6c3cb5a4604278303b770123b974fd82bea87650c2ce97dc54d518f6f2dc4bce57ddac83faff240f677d1756e1
- SSDEEP 24576:vAHnh+eWsN3skA4RV1Hom2KXMmHaG8hcuVoWVwuS5:Sh+ZkldoPK8YaGsmT
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
RFQ-00001713-223.exe
Resource
win7-20240611-en
8 signatures
300 seconds
Behavioral task
behavioral2
Sample
RFQ-00001713-223.exe
Resource
win10v2004-20240508-en
8 signatures
300 seconds
Malware Config
Targets
-
- Target RFQ-00001713-223.exe
- Size 1.3MB
- SHA256 b6aac27c09becec83d3a864b4fb638abbeb0ca0f86b52f800eb331b835795975
- MD5 766e401968d6d1e9a663259d699fd564
- SHA1 32ef00c41a443f3863aa334cd597f187ebf8db1f
- SHA512 447b09f82e5e4cff326b42caf80cdea34b2f9d6c3cb5a4604278303b770123b974fd82bea87650c2ce97dc54d518f6f2dc4bce57ddac83faff240f677d1756e1
- SSDEEP 24576:vAHnh+eWsN3skA4RV1Hom2KXMmHaG8hcuVoWVwuS5:Sh+ZkldoPK8YaGsmT
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Suspicious use of SetThreadContext