General
-
Target
Debug.zip
-
Size
3.4MB
-
Sample
240619-zs7qyawbnl
-
MD5
f9b9132e580ba02d257b16ff1b5d51ab
-
SHA1
d3d234d4ca2d07122802d52748957f9e5d882a6e
-
SHA256
40058264c50c118eae3308775868c6f0b075091a6105fb322076856f77a6780f
-
SHA512
80721d6cd26c842fc1c9f8fae09f892a19820429e7759002a27ac502cfd93900e46e0669c9207276bf7787802522a7edfc7d29e72da0601b2baace3cdc435442
-
SSDEEP
49152:y5LoiOS9dxlZUJuTBQO40s3bWs8/SktpMxNEUMSLdRaWBFEKd3TrQ2YhhQ5c/5yc:0lDOm2gsrW6eqgmf/NVI7hiqZdOS
Behavioral task
behavioral1
Sample
Debug.zip
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
Debug.zip
-
Size
3.4MB
-
MD5
f9b9132e580ba02d257b16ff1b5d51ab
-
SHA1
d3d234d4ca2d07122802d52748957f9e5d882a6e
-
SHA256
40058264c50c118eae3308775868c6f0b075091a6105fb322076856f77a6780f
-
SHA512
80721d6cd26c842fc1c9f8fae09f892a19820429e7759002a27ac502cfd93900e46e0669c9207276bf7787802522a7edfc7d29e72da0601b2baace3cdc435442
-
SSDEEP
49152:y5LoiOS9dxlZUJuTBQO40s3bWs8/SktpMxNEUMSLdRaWBFEKd3TrQ2YhhQ5c/5yc:0lDOm2gsrW6eqgmf/NVI7hiqZdOS
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla payload
-
Executes dropped EXE
-
Loads dropped DLL
-