General
-
Target
Debug.rar
-
Size
1.0MB
-
Sample
240904-2vwgssyhlg
-
MD5
522ebecbe103a3d2b12d0844014936d6
-
SHA1
d58d37688ac66d45d3ad3e8c103cf5651a6ef593
-
SHA256
1e50ca3f32a5cfac1877f0887a31067d80ae4f3d5022ea6f29243e5cb3fd3c0c
-
SHA512
3b861a2f6f88dc91f3717353653758c289e875ac79072847688767cfd7b700844d850880d1754d1c6f896e84f6abd30f33b0cfcca998db6161ca8f3a62e3b169
-
SSDEEP
24576:D1KK6ImbokiLRq3dieSQiua9oxaAPaNTEAvest/EGw634DJJtxLjr:DcCoo5L4Nn/s+xRPaqs2v63aJJbT
Malware Config
Targets
-
-
Target
Debug.rar
-
Size
1.0MB
-
MD5
522ebecbe103a3d2b12d0844014936d6
-
SHA1
d58d37688ac66d45d3ad3e8c103cf5651a6ef593
-
SHA256
1e50ca3f32a5cfac1877f0887a31067d80ae4f3d5022ea6f29243e5cb3fd3c0c
-
SHA512
3b861a2f6f88dc91f3717353653758c289e875ac79072847688767cfd7b700844d850880d1754d1c6f896e84f6abd30f33b0cfcca998db6161ca8f3a62e3b169
-
SSDEEP
24576:D1KK6ImbokiLRq3dieSQiua9oxaAPaNTEAvest/EGw634DJJtxLjr:DcCoo5L4Nn/s+xRPaqs2v63aJJbT
-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla payload
-
Executes dropped EXE
-
Loads dropped DLL
-