General
-
Target
WaspLoader.exe
-
Size
1.7MB
-
Sample
240908-sr5fvstanr
-
MD5
ded7171654d9f359e3f920bd97eea82a
-
SHA1
211ae6a3d881adc8a88e2ae625ae783342b2d572
-
SHA256
fbe79d5be3c54c322b4417a1633fa98fae73da97e30da6e22647aaa8ea47ec3f
-
SHA512
8bf30b9316f02fc9deaa808c7d47eaede9238242aa38f78954297ed3348d7e2272cd2c26160a6d0a841eeef1d532ad63734e77888926ba0b25b6e253dacfade2
-
SSDEEP
49152:9aP1jE577CLgoGZCn9WlGHQz+YmQxbxipU8IlJtLaSgwSreHTXRY1Ix798Lsqbv1:9aP1jE577CLgoGZCn9WlGHQz+YmQxbxQ
Static task
static1
Behavioral task
behavioral1
Sample
WaspLoader.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
WaspLoader.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
WaspLoader.exe
-
Size
1.7MB
-
MD5
ded7171654d9f359e3f920bd97eea82a
-
SHA1
211ae6a3d881adc8a88e2ae625ae783342b2d572
-
SHA256
fbe79d5be3c54c322b4417a1633fa98fae73da97e30da6e22647aaa8ea47ec3f
-
SHA512
8bf30b9316f02fc9deaa808c7d47eaede9238242aa38f78954297ed3348d7e2272cd2c26160a6d0a841eeef1d532ad63734e77888926ba0b25b6e253dacfade2
-
SSDEEP
49152:9aP1jE577CLgoGZCn9WlGHQz+YmQxbxipU8IlJtLaSgwSreHTXRY1Ix798Lsqbv1:9aP1jE577CLgoGZCn9WlGHQz+YmQxbxQ
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla payload
-