Resubmissions
20/09/2026, 23:15
260920-282wqsvthz13/02/2026, 19:29
260213-x68jaadv5b13/02/2026, 19:29
260213-x678hsdv5a08/07/2025, 07:13
250708-h1781a1ny305/06/2025, 12:22
250605-pj5j4sw1cx18/05/2025, 11:52
250518-n15qrscr7s09/05/2025, 15:33
250509-sznhbaxnv516/02/2025, 10:06
250216-l5kv2sskfm18/08/2024, 04:49
240818-ffm18aygnn10Analysis
- max time kernel
132s - max time network
151s - platform
windows11-21h2_x64 - resource
win11-20240802-en - resource tags
- submitted
18/08/2024, 04:49
General
- Target G700-V5 Cracked @hydra4z/G-700 RAT V5 Cracked @hydra4z.exe
- Size 183.8MB
- Sample240818-ffm18aygnn
- SHA256 65ad213f9c6403308cbc805ebe122e08c52c8d21d1b4f8efd0f406e2d448bdef
Malware Config
Signatures
- AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
- AgentTesla payload 1 IoCs
- Enumerates system info in registry 2 TTPs 3 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\G700-V5 Cracked @hydra4z\G-700 RAT V5 Cracked @hydra4z.exe"C:\Users\Admin\AppData\Local\Temp\G700-V5 Cracked @hydra4z\G-700 RAT V5 Cracked @hydra4z.exe"1⤵
- Enumerates system info in registry
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4288-0-0x00007FF944ED3000-0x00007FF944ED5000-memory.dmp
memory/4288-1-0x0000023FE5AB0000-0x0000023FE6AB0000-memory.dmp
memory/4288-2-0x0000023FF1700000-0x0000023FF170C000-memory.dmp
memory/4288-3-0x0000023FF3050000-0x0000023FF306C000-memory.dmp
memory/4288-4-0x0000023FF31A0000-0x0000023FF31CC000-memory.dmp
memory/4288-5-0x0000023FF5FE0000-0x0000023FF601C000-memory.dmp
memory/4288-6-0x00007FF944ED0000-0x00007FF945992000-memory.dmp
memory/4288-7-0x00007FF944ED0000-0x00007FF945992000-memory.dmp
memory/4288-8-0x00007FF944ED0000-0x00007FF945992000-memory.dmp
memory/4288-9-0x0000023FF6BE0000-0x0000023FF6D86000-memory.dmp
memory/4288-10-0x0000023FF7130000-0x0000023FF7342000-memory.dmp
memory/4288-11-0x00007FF944ED3000-0x00007FF944ED5000-memory.dmp
memory/4288-12-0x00007FF944ED0000-0x00007FF945992000-memory.dmp
memory/4288-13-0x0000023FF3280000-0x0000023FF32B6000-memory.dmp
memory/4288-14-0x00007FF944ED0000-0x00007FF945992000-memory.dmp
memory/4288-15-0x00007FF944ED0000-0x00007FF945992000-memory.dmp
memory/4288-16-0x0000023FFF8B0000-0x0000023FFF8C2000-memory.dmp
memory/4288-17-0x00007FF944ED0000-0x00007FF945992000-memory.dmp
memory/4288-18-0x0000023FFFCA0000-0x0000023FFFCDC000-memory.dmp
memory/4288-19-0x00007FF944ED0000-0x00007FF945992000-memory.dmp
memory/4288-20-0x00007FF944ED0000-0x00007FF945992000-memory.dmp
memory/4288-21-0x00007FF944ED0000-0x00007FF945992000-memory.dmp
memory/4288-22-0x00007FF944ED0000-0x00007FF945992000-memory.dmp