General
-
Target
Valhalla4.rar
-
Size
2.2MB
-
Sample
240831-dnphxasekf
-
MD5
830483d8ddd85ff7990bb5268b6db873
-
SHA1
659cb779864fe15d6ba63bfdbb5b4a0f9aa1b139
-
SHA256
026d3a2ce08da16d69e7da0110f7e205a0043bda286edf6df0609b310aa801c9
-
SHA512
d68f63c4bbb92601d267ddac8245f1abc997fdd484bee7d106fddd2f417a79132bc0981a54a83dc2c44e7b491997a67df1efd3f851ee0638b883e4e5ed661dd7
-
SSDEEP
49152:podDgfzq2Cku45PmWAm5+LnZEjgqoqKf9Xcw34UAE10Q38ecp:pEc3CyORm5+LnZqmXcQdUc8F
Behavioral task
behavioral1
Sample
Guna.UI2.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
Guna.UI2.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
Newtonsoft.Json.dll
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
Newtonsoft.Json.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
bGQG1lUueoRA8wG1VJVpZI.exe
Resource
win7-20240704-en
Malware Config
Targets
-
-
Target
Guna.UI2.dll
-
Size
2.1MB
-
MD5
c19e9e6a4bc1b668d19505a0437e7f7e
-
SHA1
73be712aef4baa6e9dabfc237b5c039f62a847fa
-
SHA256
9ac8b65e5c13292a8e564187c1e7446adc4230228b669383bd7b07035ab99a82
-
SHA512
b6cd0af436459f35a97db2d928120c53d3691533b01e4f0e8b382f2bd81d9a9a2c57e5e2aa6ade9d6a1746d5c4b2ef6c88d3a0cf519424b34445d0d30aab61de
-
SSDEEP
49152:6QNztBO2+VN7N3HtnPhx70ZO4+CPXOn5PThDH2TBeHjvjiBckYf+Yh/FJ3:6Ahck2z
Score1/10 -
-
-
Target
Newtonsoft.Json.dll
-
Size
695KB
-
MD5
195ffb7167db3219b217c4fd439eedd6
-
SHA1
1e76e6099570ede620b76ed47cf8d03a936d49f8
-
SHA256
e1e27af7b07eeedf5ce71a9255f0422816a6fc5849a483c6714e1b472044fa9d
-
SHA512
56eb7f070929b239642dab729537dde2c2287bdb852ad9e80b5358c74b14bc2b2dded910d0e3b6304ea27eb587e5f19db0a92e1cbae6a70fb20b4ef05057e4ac
-
SSDEEP
12288:GBja5bBvR8Q0TE2HB0WLmvXbsVG1Gw03RzxNHgKhwFBkjSHXP36RMGy1NqTUO:GBjk38WuBcAbwoA/BkjSHXP36RMG/
Score1/10 -
-
-
Target
bGQG1lUueoRA8wG1VJVpZI.exe
-
Size
2.5MB
-
MD5
1131d469af31cd6b8f255082a47b61d0
-
SHA1
45c760394e35b8d22001f273483a16884f941b7d
-
SHA256
0c18eb1176bcfd47bb2a2865fd16f0e45006a1d15fa310d4d96a661844ca4454
-
SHA512
d8e3f54bf66dc6e1ccebc74b4ab430f653e8a8455b5557d604a90e04559ae88c671ebfda099a9c7983a7d0df21ad1592bdc3c7d53104e0510386e190a721e4d4
-
SSDEEP
49152:jgt6keWN9P/GH9wRYuQVGBjRtkgkrz0zVj12ffeCDf:jgIgN9P/GH9w2VGBjvgz0zLuDf
-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla payload
-