General
-
Target
fggggg.zip
-
Size
2.4MB
-
Sample
240905-mv7gqszdkh
-
MD5
e10b7708bf02c6b8e67a95ee71f2db31
-
SHA1
a6d05ec387f53c1774ce18e72ee1604ef85f5452
-
SHA256
b9227b1e836404aaa875cf15a0bebc3db680afc420124d138803c98bd9a58cad
-
SHA512
cd52f761fd0817a8e5c749ed7a19571ff7443f5f6ba6e56fb3c2d03714ed1e669072dbb5ebf624e021dce7ae4fec2054fcbaf7c1d40c33ecf11a1a75984be70b
-
SSDEEP
49152:cdmpcO5lRj0a+n5mTwRx8nzoMr8rc0ghxbMzD6sqiLUVPHT6Y9Te85:cdmpcOR0D5mTwRx8zoG0sxga5LVPje85
Behavioral task
behavioral1
Sample
fggggg/Guna.UI2.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
fggggg/Guna.UI2.dll
Resource
win11-20240802-en
Behavioral task
behavioral3
Sample
fggggg/Newtonsoft.Json.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral4
Sample
fggggg/Newtonsoft.Json.dll
Resource
win11-20240802-en
Behavioral task
behavioral5
Sample
fggggg/bGQG1lUueoRA8wG1VJVpZI.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
fggggg/Guna.UI2.dll
-
Size
2.1MB
-
MD5
c19e9e6a4bc1b668d19505a0437e7f7e
-
SHA1
73be712aef4baa6e9dabfc237b5c039f62a847fa
-
SHA256
9ac8b65e5c13292a8e564187c1e7446adc4230228b669383bd7b07035ab99a82
-
SHA512
b6cd0af436459f35a97db2d928120c53d3691533b01e4f0e8b382f2bd81d9a9a2c57e5e2aa6ade9d6a1746d5c4b2ef6c88d3a0cf519424b34445d0d30aab61de
-
SSDEEP
49152:6QNztBO2+VN7N3HtnPhx70ZO4+CPXOn5PThDH2TBeHjvjiBckYf+Yh/FJ3:6Ahck2z
Score1/10 -
-
-
Target
fggggg/Newtonsoft.Json.dll
-
Size
695KB
-
MD5
195ffb7167db3219b217c4fd439eedd6
-
SHA1
1e76e6099570ede620b76ed47cf8d03a936d49f8
-
SHA256
e1e27af7b07eeedf5ce71a9255f0422816a6fc5849a483c6714e1b472044fa9d
-
SHA512
56eb7f070929b239642dab729537dde2c2287bdb852ad9e80b5358c74b14bc2b2dded910d0e3b6304ea27eb587e5f19db0a92e1cbae6a70fb20b4ef05057e4ac
-
SSDEEP
12288:GBja5bBvR8Q0TE2HB0WLmvXbsVG1Gw03RzxNHgKhwFBkjSHXP36RMGy1NqTUO:GBjk38WuBcAbwoA/BkjSHXP36RMG/
Score1/10 -
-
-
Target
fggggg/bGQG1lUueoRA8wG1VJVpZI.exe
-
Size
2.5MB
-
MD5
1131d469af31cd6b8f255082a47b61d0
-
SHA1
45c760394e35b8d22001f273483a16884f941b7d
-
SHA256
0c18eb1176bcfd47bb2a2865fd16f0e45006a1d15fa310d4d96a661844ca4454
-
SHA512
d8e3f54bf66dc6e1ccebc74b4ab430f653e8a8455b5557d604a90e04559ae88c671ebfda099a9c7983a7d0df21ad1592bdc3c7d53104e0510386e190a721e4d4
-
SSDEEP
49152:jgt6keWN9P/GH9wRYuQVGBjRtkgkrz0zVj12ffeCDf:jgIgN9P/GH9w2VGBjvgz0zLuDf
-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla payload
-