General
-
Target
EeQLXpK.zip
-
Size
2.7MB
-
Sample
240902-c9cksszbnl
-
MD5
47ea9e8a5155f61cc803f87c91fd06c8
-
SHA1
7dc1abc29a9146801489ee4be63ea6e5d73f3085
-
SHA256
3fadc8c170340e5882cbeaaf9a5d6720d9ffec0d4fc474f2a78f90db8b784a98
-
SHA512
52ce9ed8027ad5ead040f08328d7c1538300a42feb9a0e4f655a1c2e5a752a07fc043c97314bbe3028b1f5176f53aa6b3352b0bcac2927dfa613d94982fbe84d
-
SSDEEP
49152:tkPAL2ZYMYp0y02r8Z9TC7+665MskIeWpkbSpqFVNj1w/kD4lbtLQ26:7LrH02oZFCDGLzXabS2l6byH
Behavioral task
behavioral1
Sample
QJehqwrhqwQJrkwQKRQj/Guna.UI2.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
QJehqwrhqwQJrkwQKRQj/Guna.UI2.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
QJehqwrhqwQJrkwQKRQj/JhhtjqQiekrkQLm.exe
Resource
win7-20240729-en
Behavioral task
behavioral4
Sample
QJehqwrhqwQJrkwQKRQj/JhhtjqQiekrkQLm.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
QJehqwrhqwQJrkwQKRQj/Newtonsoft.Json.dll
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
QJehqwrhqwQJrkwQKRQj/Newtonsoft.Json.dll
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
QJehqwrhqwQJrkwQKRQj/Guna.UI2.dll
-
Size
2.1MB
-
MD5
c19e9e6a4bc1b668d19505a0437e7f7e
-
SHA1
73be712aef4baa6e9dabfc237b5c039f62a847fa
-
SHA256
9ac8b65e5c13292a8e564187c1e7446adc4230228b669383bd7b07035ab99a82
-
SHA512
b6cd0af436459f35a97db2d928120c53d3691533b01e4f0e8b382f2bd81d9a9a2c57e5e2aa6ade9d6a1746d5c4b2ef6c88d3a0cf519424b34445d0d30aab61de
-
SSDEEP
49152:6QNztBO2+VN7N3HtnPhx70ZO4+CPXOn5PThDH2TBeHjvjiBckYf+Yh/FJ3:6Ahck2z
Score1/10 -
-
-
Target
QJehqwrhqwQJrkwQKRQj/JhhtjqQiekrkQLm.exe
-
Size
3.2MB
-
MD5
b77e15b0422926304c05fa5b969eb40a
-
SHA1
84bb25ad1a8d954a3c42bbc048188b67fa414952
-
SHA256
48ceb597634aceb4a4fa5fced8cf8d7f473d9b33a052dca47d31cacd4dfa12a2
-
SHA512
66ee8f30ace4ed52a958f33a4dad3510ceb3bff54c7d7dafed4a8e5dc2086ddad372c0ec92f72180b051d9a619b7c1715443dd2bae248c8474006167d4a3fed4
-
SSDEEP
49152:CTSvvph4QUQeaZODEw+NZPjBPxiMFZK40jST8Y37UDFkw4ppZX:CTSHph4QUQegODEpNJLiMaCTxAKwYpZX
-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla payload
-
-
-
Target
QJehqwrhqwQJrkwQKRQj/Newtonsoft.Json.dll
-
Size
695KB
-
MD5
195ffb7167db3219b217c4fd439eedd6
-
SHA1
1e76e6099570ede620b76ed47cf8d03a936d49f8
-
SHA256
e1e27af7b07eeedf5ce71a9255f0422816a6fc5849a483c6714e1b472044fa9d
-
SHA512
56eb7f070929b239642dab729537dde2c2287bdb852ad9e80b5358c74b14bc2b2dded910d0e3b6304ea27eb587e5f19db0a92e1cbae6a70fb20b4ef05057e4ac
-
SSDEEP
12288:GBja5bBvR8Q0TE2HB0WLmvXbsVG1Gw03RzxNHgKhwFBkjSHXP36RMGy1NqTUO:GBjk38WuBcAbwoA/BkjSHXP36RMG/
Score1/10 -