General
-
Target
da63fdeb39de1ae36dd1ca17ea1f3e8572d6eee8a1a3863343c1067fac877c7d
-
Size
833KB
-
Sample
240828-zqyegsxepl
-
MD5
cd508292676ca9cd22cdcc06b91bb88c
-
SHA1
53126872aee7b9adaf374c5c741c9b445516c49a
-
SHA256
da63fdeb39de1ae36dd1ca17ea1f3e8572d6eee8a1a3863343c1067fac877c7d
-
SHA512
f288b33037535f7afbfc77a5b1dc0b2241247e354bebe4fb726be0becefae76e6385d2d9fb565cab03181f9182c910794b29bf57afc29d870647317350b7bc7c
-
SSDEEP
24576:GU6wJ6hUAN45/ZOIqJqesnrq0Wc0UokKOkuVx:r6wcfMcJxx3/kKJuVx
Behavioral task
behavioral1
Sample
Exe To Base64 Converter V2/Exe To Base64 Converter V2.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
Exe To Base64 Converter V2/Exe To Base64 Converter V2.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
Exe To Base64 Converter V2/Guna.UI2.dll
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
Exe To Base64 Converter V2/Guna.UI2.dll
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
Exe To Base64 Converter V2/Exe To Base64 Converter V2.exe
-
Size
64KB
-
MD5
67cc371575c0b685378f811763c3cae0
-
SHA1
2294dc43f6dc4b8bb54166a43c71e08fec4b41e4
-
SHA256
e2c666332d1a0aa7dca6ed3ac41c040925e740bd1ff19c0172e87334bad5270c
-
SHA512
8a7dc04f3e77bfa8e1f7c99facce87b8fdea9406a79df15fa110bdfec56ddd3bf5b95dfa7a395e1f5cb37fd4e65e9b1579e71b048a819acfa3112b3cf58acb53
-
SSDEEP
1536:hZZcMdSlxGSFpQNpoPq5KKxgcw6hZLavR:95SuS8NAuicTi
-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla payload
-
-
-
Target
Exe To Base64 Converter V2/Guna.UI2.dll
-
Size
2.1MB
-
MD5
c05cf8543a06cf77ba8e3d03c1b39870
-
SHA1
40d53bcdc940fafccf02404866d9d917c0a84696
-
SHA256
f446f3daed76fa4d1fdfde1e00e9348ced91853662ba953e9beb8f0ac6450126
-
SHA512
07b959fab63ccf77072b70ae89f1ccc047fa4ba00fedff8503688125d9a2ca284811d4fb5c9125ff0468dd077ad2aae719b3b22067156f5c8a806f16890b9145
-
SSDEEP
49152:w34QXpXwn9cQPHvrkYsIJLBOrOcNTMzFon:wIQgcT
Score1/10 -