General
-
Target
Debug.rar
-
Size
1.5MB
-
Sample
240904-2xm87syhnh
-
MD5
793fa8a48839b30426a57924e9708e7b
-
SHA1
53e38c7556390ba84bf1cf5402ba7c73b9424fb8
-
SHA256
4d174b72d4885a6099bb775a4cfafd62569195287d657ad23b42019a4761d698
-
SHA512
7c45128232bc215916fb64db977b7105c064568bf482cb2193f9530e2d7738e91cbcd50a58989ae11c412abafb82b4cabdc17509b32fbcf45066aae27444497d
-
SSDEEP
24576:n1KK6ImbokiLRq3dieSQiua9oxaAPaNTEZc/uhSLSYcNt/V9Dvn+WfGqqUFiygUl:ncCoo5L4Nn/s+xRPa8cY9DvnHbrkyUf8
Malware Config
Targets
-
-
Target
Debug.rar
-
Size
1.5MB
-
MD5
793fa8a48839b30426a57924e9708e7b
-
SHA1
53e38c7556390ba84bf1cf5402ba7c73b9424fb8
-
SHA256
4d174b72d4885a6099bb775a4cfafd62569195287d657ad23b42019a4761d698
-
SHA512
7c45128232bc215916fb64db977b7105c064568bf482cb2193f9530e2d7738e91cbcd50a58989ae11c412abafb82b4cabdc17509b32fbcf45066aae27444497d
-
SSDEEP
24576:n1KK6ImbokiLRq3dieSQiua9oxaAPaNTEZc/uhSLSYcNt/V9Dvn+WfGqqUFiygUl:ncCoo5L4Nn/s+xRPa8cY9DvnHbrkyUf8
-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla payload
-
Executes dropped EXE
-
Loads dropped DLL
-