agenttesla

General

Target

JrJQWhehrhQjrjgMakAqkRj.rar
Size

1.9MB
Sample

240901-g4k27stemj
MD5

099fc3429055964b0945ebe1994138b4
SHA1

9d0cfce73eec1f5872e24d9a5b96f676a66fa396
SHA256

ed18c20e30d6f8deb978ebf4f41b54c2e0ce3b91ca860c140c3f85f131a3e3ea
SHA512

6ff33e0eaef37681be288dc8527e2aecfa853b4ff3afc9ec439721e5a671e371d4171a542d5f294b5f4307b649f7b1eb6a0e7f8aeaf4e9815e4a443d0f9caffe
SSDEEP

49152:SodDgfzq2Cku45PmWAmqwBJ5r/YBHvWJjT59/XsjSLHHFi:SEc3CyORmBJB/q+JjnKSrHFi

Score

10^/10

Malware Config

Targets

- Target
  
  Guna.UI2.dll
- Size
  
  2.1MB
- MD5
  
  c19e9e6a4bc1b668d19505a0437e7f7e
- SHA1
  
  73be712aef4baa6e9dabfc237b5c039f62a847fa
- SHA256
  
  9ac8b65e5c13292a8e564187c1e7446adc4230228b669383bd7b07035ab99a82
- SHA512
  
  b6cd0af436459f35a97db2d928120c53d3691533b01e4f0e8b382f2bd81d9a9a2c57e5e2aa6ade9d6a1746d5c4b2ef6c88d3a0cf519424b34445d0d30aab61de
- SSDEEP
  
  49152:6QNztBO2+VN7N3HtnPhx70ZO4+CPXOn5PThDH2TBeHjvjiBckYf+Yh/FJ3:6Ahck2z
Score

1^/10
behavioral1 behavioral2
- Target
  
  Newtonsoft.Json.dll
- Size
  
  695KB
- MD5
  
  195ffb7167db3219b217c4fd439eedd6
- SHA1
  
  1e76e6099570ede620b76ed47cf8d03a936d49f8
- SHA256
  
  e1e27af7b07eeedf5ce71a9255f0422816a6fc5849a483c6714e1b472044fa9d
- SHA512
  
  56eb7f070929b239642dab729537dde2c2287bdb852ad9e80b5358c74b14bc2b2dded910d0e3b6304ea27eb587e5f19db0a92e1cbae6a70fb20b4ef05057e4ac
- SSDEEP
  
  12288:GBja5bBvR8Q0TE2HB0WLmvXbsVG1Gw03RzxNHgKhwFBkjSHXP36RMGy1NqTUO:GBjk38WuBcAbwoA/BkjSHXP36RMG/
Score

1^/10
behavioral3 behavioral4
- Target
  
  ZjGjqw3jRnfnQkr14K.exe
- Size
  
  2.1MB
- MD5
  
  348b5b7b4f78ae7eb785245411a5446f
- SHA1
  
  0c779fc91aa9b5d292e6a2b4998d840fe80a3084
- SHA256
  
  e034f80c7d94e65ad87e6c073eef61e30f4a4d6314698e90b4cf8042d00f05fd
- SHA512
  
  31fcdd51014f98baf8855044e08ca517c3d1756af24e76d5caa4d823207803f51cbca39e95c4da9864d5cc958cfff1c8ad40d13a729ab151066806d80792a284
- SSDEEP
  
  24576:kwofSDltz963ZacwhvRZfugdwP7QMn/ylynrwwbgYtgOI+X:a663ZBw3ReP7QM1wogOI+X
Score

10^/10

agenttesla discovery keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla payload
behavioral5 behavioral6