General

  • Target

    c64858f979c3f7b4fddaefd78df2bfccfc544caaabf181ea76a8c8460c29c479

  • Size

    355KB

  • MD5

    4eb1270646af65880b52911001cdb3a8

  • SHA1

    3c9c136867f2f997c21bff32d06835a4fec5c926

  • SHA256

    c64858f979c3f7b4fddaefd78df2bfccfc544caaabf181ea76a8c8460c29c479

  • SHA512

    6a2289cfaa5704dd9d3c8aa1d5115f6d137597a540fc5f97ffc6be45864403b667a13f17c17d20ddb3a893f1d2b78a5d73cbaf95ae674e83e64433b40b98583f

  • SSDEEP

    6144:cbGA1eYCG0Lahyz6CgMwEQ1c2xf75QNcdsJGQODL:/e4ECgMwEQ1cGfVGBJG

Malware Config

Signatures

  • Agenttesla family
  • RedLine payload 1 IoCs
  • Redline family
  • SectopRAT payload 1 IoCs
  • Sectoprat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c64858f979c3f7b4fddaefd78df2bfccfc544caaabf181ea76a8c8460c29c479
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections