General
-
Target
HwidSpoofer.com.exe
-
Size
3.2MB
-
Sample
240821-hmbmwayclr
-
MD5
fe972213b44158482bee7bfd284746c0
-
SHA1
cf87c237249a170f66ae79387ed185a26f5c9aed
-
SHA256
dcc252a5e17e598b81d95fb7e74676c4f3480f8368f9f74582fb89c3433cfbb3
-
SHA512
84fae7570def0919f5ef27494da41ab47225722f1468d6b2812b3c29c2ef50e5fd636727cf17144c3ff2a051da0c261ca5a59d72c167252d92bb758806a028dd
-
SSDEEP
98304:B04Zo07xa9g7xa9L7xa9o7xa9T7xa9Nppppp8vkESY6SXvyQ:NI9r9o9D9A9QnB6SD
Static task
static1
Malware Config
Targets
-
-
Target
HwidSpoofer.com.exe
-
Size
3.2MB
-
MD5
fe972213b44158482bee7bfd284746c0
-
SHA1
cf87c237249a170f66ae79387ed185a26f5c9aed
-
SHA256
dcc252a5e17e598b81d95fb7e74676c4f3480f8368f9f74582fb89c3433cfbb3
-
SHA512
84fae7570def0919f5ef27494da41ab47225722f1468d6b2812b3c29c2ef50e5fd636727cf17144c3ff2a051da0c261ca5a59d72c167252d92bb758806a028dd
-
SSDEEP
98304:B04Zo07xa9g7xa9L7xa9o7xa9T7xa9Nppppp8vkESY6SXvyQ:NI9r9o9D9A9QnB6SD
-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla payload
-