General
- Target LocalStealer-V2.exe
- Size 7.2MB
- Sample240801-evgx3swbpc
- SHA256 98ac57e7565722a1b02bc8a8969d2d6db38d3beb9d023a2a51d18975fc061e94
- MD5 58daa206b6acf62b5e800f4e2d307ca0
- SHA1 0eb5743961ae431d9624b6d0d8bf67cd01dfac10
- SHA512 f80a9ece215096bc23c074ecacb3679047c9a008934d571e82c5b7b5ce2f7f53fdbbfda8b7a9bcbb7f178c6c3e63a721018b9bba7841a9ac968aa91ddd742783
- SSDEEP 196608:8zJpjS346tmJ1xsG53tFkjBHYo9uAyG0SuBgYKX7Nm25D2:8GIjsQ3tFSBv8DGJm2x
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
LocalStealer-V2.exe
Resource
win7-20240708-en
7 signatures
30 seconds
Behavioral task
behavioral2
Sample
LocalStealer-V2.exe
Resource
win10v2004-20240730-en
3 signatures
30 seconds
Malware Config
Targets
-
- Target LocalStealer-V2.exe
- Size 7.2MB
- SHA256 98ac57e7565722a1b02bc8a8969d2d6db38d3beb9d023a2a51d18975fc061e94
- MD5 58daa206b6acf62b5e800f4e2d307ca0
- SHA1 0eb5743961ae431d9624b6d0d8bf67cd01dfac10
- SHA512 f80a9ece215096bc23c074ecacb3679047c9a008934d571e82c5b7b5ce2f7f53fdbbfda8b7a9bcbb7f178c6c3e63a721018b9bba7841a9ac968aa91ddd742783
- SSDEEP 196608:8zJpjS346tmJ1xsG53tFkjBHYo9uAyG0SuBgYKX7Nm25D2:8GIjsQ3tFSBv8DGJm2x
- MD5 SHA1 SHA512 SSDEEP
-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla payload
-
Obfuscated with Agile.Net obfuscator
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.