General
- Target Jinx.exe
- Size 3.2MB
- Sample240807-c5ejlayeqn
- SHA256 a006c75ed2d13812a654d935aea6cefb184cfffc3946ad11a928f80784ba927f
- MD5 5f850b8709599d9285d4434a180f488c
- SHA1 d521b40d8f02ebc8343a591fbd116c10a7fb8b77
- SHA512 e045d777baeb711e50cdb00f0b2690fa0347b41d83a3a16675ad7193df9810a293a22b02bfe8a1ccc84059bb518f963aa82db0d0b20ffcd8f07400297ae6ac57
- SSDEEP 98304:6MXB/EKyIT4bNJFY3OqtuU+KH4kpc+DX/0H:6MSfjBHYevKYOD
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Jinx.exe
Resource
win7-20240704-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target Jinx.exe
- Size 3.2MB
- SHA256 a006c75ed2d13812a654d935aea6cefb184cfffc3946ad11a928f80784ba927f
- MD5 5f850b8709599d9285d4434a180f488c
- SHA1 d521b40d8f02ebc8343a591fbd116c10a7fb8b77
- SHA512 e045d777baeb711e50cdb00f0b2690fa0347b41d83a3a16675ad7193df9810a293a22b02bfe8a1ccc84059bb518f963aa82db0d0b20ffcd8f07400297ae6ac57
- SSDEEP 98304:6MXB/EKyIT4bNJFY3OqtuU+KH4kpc+DX/0H:6MSfjBHYevKYOD
- MD5 SHA1 SHA512 SSDEEP
-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla payload
-
Legitimate hosting services abused for malware hosting/C2