General
-
Target
608606fec3f28c4d90ec52341309dd0450ead7f60336616173ad51b0d0f0a842
-
Size
1.0MB
-
Sample
240831-ghps9syejj
-
MD5
da2fe91e9111828e1f889c132d074af4
-
SHA1
4c0a0c45919065f8dcfcc6080688af5761a50c65
-
SHA256
608606fec3f28c4d90ec52341309dd0450ead7f60336616173ad51b0d0f0a842
-
SHA512
7796b82a787c787f9c4ba1754ae69374292a765c1a5877c64e2d9073313dd2396b38e33ae15624fb02c893d43f1a3e4218bdef6b98805409a8f0ebc4eb229ffa
-
SSDEEP
24576:MwPyQ7oLcFd9KdVIhQ3Lz0Unh2oC0FEEfLFTvjFYB:Mw6QELcFEZ7zkZ0LFPFYB
Behavioral task
behavioral1
Sample
Guna.UI2.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
Guna.UI2.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
Velocitylol.exe
Resource
win7-20240708-en
Malware Config
Targets
-
-
Target
Guna.UI2.dll
-
Size
2.1MB
-
MD5
c97f23b52087cfa97985f784ea83498f
-
SHA1
d364618bec9cd6f8f5d4c24d3cc0f4c1a8e06b89
-
SHA256
e658e8a5616245dbe655e194b59f1bb704aaeafbd0925d6eebbe70555a638cdd
-
SHA512
ecfa83596f99afde9758d1142ff8b510a090cba6f42ba6fda8ca5e0520b658943ad85829a07bf17411e26e58432b74f05356f7eaeb3949a8834faa5de1a4f512
-
SSDEEP
49152:cvrqKk8q2gqi2OXCt6kuSw9g8PTNTN/23uxjPHEiCAjFcm:cvrqZr
Score1/10 -
-
-
Target
Velocitylol.exe
-
Size
421KB
-
MD5
03dc9e5783a59b398d82d8d9b8a05358
-
SHA1
f5b32f0ac7bbd17dfe718ff28122bd18a6b74fb8
-
SHA256
730f9bf833862454350cebd595433cad213b8291fc583d19edaee5da2a39523e
-
SHA512
1d6b416fb8409f88c727f9b117c3823593dcfdbcada6296c7871cb2ff78b9c294b2614d96beb357dbe793c462a71fa3a70fc5d4f9e6c11a76b45539b77e7d208
-
SSDEEP
12288:QhuuolNImrwCoPOe0cXb0cFY1lKBhvm9Ue4Nj:FRle0Sb0cFY1lEhCK
-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla payload
-