General

  • Target

    sffs.rar

  • Size

    17.7MB

  • MD5

    31e2abd72ae769102597b91e969be5ea

  • SHA1

    34c90eccdd66639c8fa85ac6c9bc6d869ed79e82

  • SHA256

    dbe618d65529651707ebc6d1077339bd75c4f4ffdf0b39ff19397db44ec20b06

  • SHA512

    a935713b263cd593453b0a75de3caa7c66f2e8a2c654047d1622ea2afff7a712c4e4f0fbe6034e6b0a37fb1ccaa5ccb8bdcc5e01cab387d03115ca93085178a8

  • SSDEEP

    393216:KH2UY7ycmDNtzADL7ef6u2COAZcRFw9zoq0L/mtWatCpwzrWE0G:Ke7XmJt0v7CNPOAZpwm8iCurWI

Score
10/10

Malware Config

Signatures

  • AgentTesla payload 9 IoCs
  • Agenttesla family
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • sffs.rar
    .rar

    Password: 1

  • fsnfsnfhsf.sln
  • fsnfsnfhsf/App.config
  • fsnfsnfhsf/Form1.Designer.cs
  • fsnfsnfhsf/Form1.cs
  • fsnfsnfhsf/Form1.resx
    .vbs
  • fsnfsnfhsf/Form2.Designer.cs
  • fsnfsnfhsf/Form2.cs
  • fsnfsnfhsf/Form2.resx
    .vbs
  • fsnfsnfhsf/Form3.Designer.cs
  • fsnfsnfhsf/Form3.cs
  • fsnfsnfhsf/Form3.resx
    .vbs
  • fsnfsnfhsf/KeyAuth.cs
    .js
  • fsnfsnfhsf/Program.cs
  • fsnfsnfhsf/Properties/AssemblyInfo.cs
  • fsnfsnfhsf/Properties/Resources.Designer.cs
    .vbs
  • fsnfsnfhsf/Properties/Resources.resx
    .vbs
  • fsnfsnfhsf/Properties/Settings.Designer.cs
  • fsnfsnfhsf/Properties/Settings.settings
  • fsnfsnfhsf/bin/Debug/FastColoredTextBox.dll
    .dll windows:4 windows x86 arch:x86

    Password: 1

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • fsnfsnfhsf/bin/Debug/Guna.UI2.dll
    .dll windows:4 windows x86 arch:x86

    Password: 1

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • fsnfsnfhsf/bin/Debug/Keyauth/KeyAuth.cs
    .js
  • fsnfsnfhsf/bin/Debug/Newtonsoft.Json.dll
    .dll windows:4 windows x86 arch:x86

    Password: 1

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • fsnfsnfhsf/bin/Debug/Newtonsoft.Json.xml
    .xml
  • fsnfsnfhsf/bin/Debug/fsnfsnfhsf.exe
    .exe windows:4 windows x86 arch:x86

    Password: 1

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • fsnfsnfhsf/bin/Debug/fsnfsnfhsf.exe.config
  • fsnfsnfhsf/bin/Debug/fsnfsnfhsf.pdb
  • fsnfsnfhsf/fsnfsnfhsf.csproj
  • fsnfsnfhsf/obj/Debug/.NETFramework,Version=v4.8.AssemblyAttributes.cs
  • fsnfsnfhsf/obj/Debug/DesignTimeResolveAssemblyReferences.cache
  • fsnfsnfhsf/obj/Debug/DesignTimeResolveAssemblyReferencesInput.cache
  • fsnfsnfhsf/obj/Debug/fsnfsnfhsf.Form1.resources
  • fsnfsnfhsf/obj/Debug/fsnfsnfhsf.Form2.resources
  • fsnfsnfhsf/obj/Debug/fsnfsnfhsf.Form3.resources
  • fsnfsnfhsf/obj/Debug/fsnfsnfhsf.Properties.Resources.resources
  • fsnfsnfhsf/obj/Debug/fsnfsnfhsf.csproj.AssemblyReference.cache
  • fsnfsnfhsf/obj/Debug/fsnfsnfhsf.csproj.CoreCompileInputs.cache
  • fsnfsnfhsf/obj/Debug/fsnfsnfhsf.csproj.FileListAbsolute.txt
  • fsnfsnfhsf/obj/Debug/fsnfsnfhsf.csproj.GenerateResource.cache
  • fsnfsnfhsf/obj/Debug/fsnfsnfhsf.exe
    .exe windows:4 windows x86 arch:x86

    Password: 1

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • fsnfsnfhsf/obj/Debug/fsnfsnfhsf.pdb
  • fsnfsnfhsf/packages.config
  • packages/Guna.UI2.WinForms.2.0.4.6/.signature.p7s
  • packages/Guna.UI2.WinForms.2.0.4.6/Guna.UI2.WinForms.2.0.4.6.nupkg
    .nupkg
  • packages/Guna.UI2.WinForms.2.0.4.6/LICENSE.txt
  • packages/Guna.UI2.WinForms.2.0.4.6/README.md
  • packages/Guna.UI2.WinForms.2.0.4.6/icon.png
    .png

    Password: 1

  • packages/Guna.UI2.WinForms.2.0.4.6/lib/net40/Guna.UI2.dll
    .dll windows:4 windows x86 arch:x86

    Password: 1

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • packages/Guna.UI2.WinForms.2.0.4.6/lib/net45/Guna.UI2.dll
    .dll windows:4 windows x86 arch:x86

    Password: 1

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • packages/Guna.UI2.WinForms.2.0.4.6/lib/net461/Guna.UI2.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • packages/Guna.UI2.WinForms.2.0.4.6/lib/net472/Guna.UI2.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • packages/Guna.UI2.WinForms.2.0.4.6/lib/net48/Guna.UI2.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • packages/Guna.UI2.WinForms.2.0.4.6/lib/net6.0-windows7.0/Guna.UI2.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • packages/Guna.UI2.WinForms.2.0.4.6/lib/net7.0-windows7.0/Guna.UI2.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • packages/Guna.UI2.WinForms.2.0.4.6/lib/netcoreapp3.1/Guna.UI2.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • packages/Newtonsoft.Json.13.0.3/.signature.p7s
  • packages/Newtonsoft.Json.13.0.3/LICENSE.md
  • packages/Newtonsoft.Json.13.0.3/Newtonsoft.Json.13.0.3.nupkg
    .nupkg
  • packages/Newtonsoft.Json.13.0.3/README.md
  • packages/Newtonsoft.Json.13.0.3/lib/net20/Newtonsoft.Json.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • packages/Newtonsoft.Json.13.0.3/lib/net20/Newtonsoft.Json.xml
    .xml
  • packages/Newtonsoft.Json.13.0.3/lib/net35/Newtonsoft.Json.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • packages/Newtonsoft.Json.13.0.3/lib/net35/Newtonsoft.Json.xml
    .xml
  • packages/Newtonsoft.Json.13.0.3/lib/net40/Newtonsoft.Json.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • packages/Newtonsoft.Json.13.0.3/lib/net40/Newtonsoft.Json.xml
    .xml
  • packages/Newtonsoft.Json.13.0.3/lib/net45/Newtonsoft.Json.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • packages/Newtonsoft.Json.13.0.3/lib/net45/Newtonsoft.Json.xml
    .xml
  • packages/Newtonsoft.Json.13.0.3/lib/net6.0/Newtonsoft.Json.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • packages/Newtonsoft.Json.13.0.3/lib/net6.0/Newtonsoft.Json.xml
    .xml
  • packages/Newtonsoft.Json.13.0.3/lib/netstandard1.0/Newtonsoft.Json.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • packages/Newtonsoft.Json.13.0.3/lib/netstandard1.0/Newtonsoft.Json.xml
    .xml
  • packages/Newtonsoft.Json.13.0.3/lib/netstandard1.3/Newtonsoft.Json.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • packages/Newtonsoft.Json.13.0.3/lib/netstandard1.3/Newtonsoft.Json.xml
    .xml
  • packages/Newtonsoft.Json.13.0.3/lib/netstandard2.0/Newtonsoft.Json.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • packages/Newtonsoft.Json.13.0.3/lib/netstandard2.0/Newtonsoft.Json.xml
    .xml
  • packages/Newtonsoft.Json.13.0.3/packageIcon.png
    .png
  • packages/System.Runtime.Serialization.Json.4.3.0/.signature.p7s
  • packages/System.Runtime.Serialization.Json.4.3.0/System.Runtime.Serialization.Json.4.3.0.nupkg
    .nupkg
  • packages/System.Runtime.Serialization.Json.4.3.0/ThirdPartyNotices.txt
  • packages/System.Runtime.Serialization.Json.4.3.0/dotnet_library_license.txt
  • packages/System.Runtime.Serialization.Json.4.3.0/lib/netcore50/System.Runtime.Serialization.Json.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • packages/System.Runtime.Serialization.Json.4.3.0/lib/netstandard1.3/System.Runtime.Serialization.Json.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • packages/System.Runtime.Serialization.Json.4.3.0/ref/netcore50/System.Runtime.Serialization.Json.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • packages/System.Runtime.Serialization.Json.4.3.0/ref/netcore50/System.Runtime.Serialization.Json.xml
  • packages/System.Runtime.Serialization.Json.4.3.0/ref/netcore50/de/System.Runtime.Serialization.Json.xml
  • packages/System.Runtime.Serialization.Json.4.3.0/ref/netcore50/es/System.Runtime.Serialization.Json.xml
  • packages/System.Runtime.Serialization.Json.4.3.0/ref/netcore50/fr/System.Runtime.Serialization.Json.xml
  • packages/System.Runtime.Serialization.Json.4.3.0/ref/netcore50/it/System.Runtime.Serialization.Json.xml
  • packages/System.Runtime.Serialization.Json.4.3.0/ref/netcore50/ja/System.Runtime.Serialization.Json.xml
  • packages/System.Runtime.Serialization.Json.4.3.0/ref/netcore50/ko/System.Runtime.Serialization.Json.xml
  • packages/System.Runtime.Serialization.Json.4.3.0/ref/netcore50/ru/System.Runtime.Serialization.Json.xml
  • packages/System.Runtime.Serialization.Json.4.3.0/ref/netcore50/zh-hans/System.Runtime.Serialization.Json.xml
  • packages/System.Runtime.Serialization.Json.4.3.0/ref/netcore50/zh-hant/System.Runtime.Serialization.Json.xml
  • packages/System.Runtime.Serialization.Json.4.3.0/ref/netstandard1.0/System.Runtime.Serialization.Json.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • packages/System.Runtime.Serialization.Json.4.3.0/ref/netstandard1.0/System.Runtime.Serialization.Json.xml
  • packages/System.Runtime.Serialization.Json.4.3.0/ref/netstandard1.0/de/System.Runtime.Serialization.Json.xml
  • packages/System.Runtime.Serialization.Json.4.3.0/ref/netstandard1.0/es/System.Runtime.Serialization.Json.xml
  • packages/System.Runtime.Serialization.Json.4.3.0/ref/netstandard1.0/fr/System.Runtime.Serialization.Json.xml
  • packages/System.Runtime.Serialization.Json.4.3.0/ref/netstandard1.0/it/System.Runtime.Serialization.Json.xml
  • packages/System.Runtime.Serialization.Json.4.3.0/ref/netstandard1.0/ja/System.Runtime.Serialization.Json.xml
  • packages/System.Runtime.Serialization.Json.4.3.0/ref/netstandard1.0/ko/System.Runtime.Serialization.Json.xml
  • packages/System.Runtime.Serialization.Json.4.3.0/ref/netstandard1.0/ru/System.Runtime.Serialization.Json.xml
  • packages/System.Runtime.Serialization.Json.4.3.0/ref/netstandard1.0/zh-hans/System.Runtime.Serialization.Json.xml
  • packages/System.Runtime.Serialization.Json.4.3.0/ref/netstandard1.0/zh-hant/System.Runtime.Serialization.Json.xml