Overview

overview

10

Static

static

10

Jules.zip

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Jules.zip

  • Size

    58.5MB

  • Sample

    240830-mzvcza1hnn

  • MD5

    00154e66f9114f2e323f7b8ed8207409

  • SHA1

    5613a98dd2fc2c781cb1cc372ac0e179c68dbb39

  • SHA256

    567d2583803142401ff749e5a6544ecbdcf1c6974610d454bd080ca749626d3e

  • SHA512

    dc4f4166c5534840083c3f9a760007757858ddc1565e4a37b2e468972fa047ca6621877ee059dc9f54f39d1bffacd646720eb056714f55b928afa646de4d9fc6

  • SSDEEP

    1572864:yJTGlvNbeB0uXci0nZFJJ2XBeYiGwoUj3lPykrPUTxk:yJTGlvNCBNchFJJSQFoUblRrPaxk

Score
10/10
agenttesladiscoverykeyloggerpyinstallerspywarestealertrojan

Malware Config

Targets

    • Target

      Jules.zip

    • Size

      58.5MB

    • MD5

      00154e66f9114f2e323f7b8ed8207409

    • SHA1

      5613a98dd2fc2c781cb1cc372ac0e179c68dbb39

    • SHA256

      567d2583803142401ff749e5a6544ecbdcf1c6974610d454bd080ca749626d3e

    • SHA512

      dc4f4166c5534840083c3f9a760007757858ddc1565e4a37b2e468972fa047ca6621877ee059dc9f54f39d1bffacd646720eb056714f55b928afa646de4d9fc6

    • SSDEEP

      1572864:yJTGlvNbeB0uXci0nZFJJ2XBeYiGwoUj3lPykrPUTxk:yJTGlvNCBNchFJJSQFoUblRrPaxk

    Score
    10/10
    agenttesladiscoverykeyloggerspywarestealertrojan

    • AgentTesla

      Agent Tesla is a remote access tool (RAT) written in visual basic.

      keyloggertrojanstealerspywareagenttesla

    • AgentTesla payload

    • Loads dropped DLL

    • Network Share Discovery

      Attempt to gather information on host network.

      discovery

    • Drops file in System32 directory

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks