General
-
Target
CMLiteV4Installer.zip
-
Size
31.6MB
-
Sample
240910-3rtdpssfjc
-
MD5
2e1ba0603375d2822140fb09dd23e60f
-
SHA1
037aa16d5afa22864b788965fe655aa587078720
-
SHA256
3557ec93be2db5c886071be19c3fa66e1ff3f14e0ad0d37397a2fdbb06b24c2c
-
SHA512
5ef6c7c9439cdaf0cb6da795dd3c9cfedc47e49a994ee8924526c0211d76c2ccdb6488c37c19cbeff789cd771ad4f0aa84a2095b7e79809c4f42cf6d9a854878
-
SSDEEP
786432:D6pe3O19PYhQ7KK+3JrFIkgtJRKUCdwtMQFiistqj4M1K9ad+/YGPSl1YJ:DX40QWK+3JJrg9KzOzFiLwj4M1WrTPSo
Static task
static1
Behavioral task
behavioral1
Sample
CMLiteV4Installer.zip
Resource
win11-20240802-en
Behavioral task
behavioral2
Sample
CMLiteInstaller.exe
Resource
win11-20240802-en
Malware Config
Targets
-
-
Target
CMLiteV4Installer.zip
-
Size
31.6MB
-
MD5
2e1ba0603375d2822140fb09dd23e60f
-
SHA1
037aa16d5afa22864b788965fe655aa587078720
-
SHA256
3557ec93be2db5c886071be19c3fa66e1ff3f14e0ad0d37397a2fdbb06b24c2c
-
SHA512
5ef6c7c9439cdaf0cb6da795dd3c9cfedc47e49a994ee8924526c0211d76c2ccdb6488c37c19cbeff789cd771ad4f0aa84a2095b7e79809c4f42cf6d9a854878
-
SSDEEP
786432:D6pe3O19PYhQ7KK+3JrFIkgtJRKUCdwtMQFiistqj4M1K9ad+/YGPSl1YJ:DX40QWK+3JJrg9KzOzFiLwj4M1WrTPSo
Score1/10 -
-
-
Target
CMLiteInstaller.exe
-
Size
977KB
-
MD5
02ea34533272f916fb52990a45917913
-
SHA1
bd68a7c84b7d7a65ab19419ddf6a2a2b44fda0a4
-
SHA256
6dd45a770648da5f5996ac7b28f604493b44f8b1ba7458cf60d3a1ab7cf18590
-
SHA512
352521214ed922b0e3331559d0c6b2af0fc55e4b4077dcf83dbeec08a8f59820c98bbbd795cdd8e2430c835ba7fbb6b19c34572762c7cf6359de05b99ef019a7
-
SSDEEP
24576:2xDVAu0gy5oaV/lEVSL24t4rmbe3Bw5m9YvWcdyFoBkkAxqV:2xDGu0gymI6kL14rmbCmU8xYan
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla payload
-