General

  • Target

    EXA.rar

  • Size

    774KB

  • MD5

    45fdfcbe36ba1f197453b2c615c652ad

  • SHA1

    1835f096306610bf8c3eb2127fb7918b539a4d3d

  • SHA256

    4cf6a68ececa9a719920f125d5b9254ed3494aaac5f5e179c52d10f12599776c

  • SHA512

    9eda4e59bae9552450a18073fb4c726fc9b1cce6a95c130c081024d3166722bd1afcc23d2e6806a4dd17ea14153874ceb5db054a7399413d03d8b92abf6eeab5

  • SSDEEP

    24576:OGA/axqDi16nTHpkF79eBW9EMzwxJkNODp:FA/axqLnTHaFABMECekN4p

Score
10/10

Malware Config

Signatures

  • AgentTesla payload 1 IoCs
  • Agenttesla family
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • EXA.rar
    .rar

    Password: 123

  • EXA/Creative EAX Settings.exe
    .exe windows:4 windows x86 arch:x86

    Password: 123

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • EXA/Creative EAX Settings.exe.config
  • EXA/Creative EAX Settings.pdb
  • EXA/EAX Console.exe
    .exe windows:4 windows x86 arch:x86

    Password: 123

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • EXA/EAX Console.pdb
  • EXA/Guna.UI2.dll
    .dll windows:4 windows x86 arch:x86

    Password: 123

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections