General
-
Target
https://cdn.discordapp.com/attachments/1204416308314374165/1269076889457266829/AimbotGratis.exe?ex=66d3a974&is=66d257f4&hm=7a9c5a759cc3fb43252c6ea942630a5ef90c4e151bb6d5f963823c8ac5c91e0b&
-
Sample
240831-br4e5axelh
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://cdn.discordapp.com/attachments/1204416308314374165/1269076889457266829/AimbotGratis.exe?ex=66d3a974&is=66d257f4&hm=7a9c5a759cc3fb43252c6ea942630a5ef90c4e151bb6d5f963823c8ac5c91e0b&
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
https://cdn.discordapp.com/attachments/1204416308314374165/1269076889457266829/AimbotGratis.exe?ex=66d3a974&is=66d257f4&hm=7a9c5a759cc3fb43252c6ea942630a5ef90c4e151bb6d5f963823c8ac5c91e0b&
Resource
win11-20240802-en
Malware Config
Targets
-
-
Target
https://cdn.discordapp.com/attachments/1204416308314374165/1269076889457266829/AimbotGratis.exe?ex=66d3a974&is=66d257f4&hm=7a9c5a759cc3fb43252c6ea942630a5ef90c4e151bb6d5f963823c8ac5c91e0b&
-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla payload
-
Downloads MZ/PE file
-
Executes dropped EXE
-