General

  • Target

    EXA.rar

  • Size

    774KB

  • MD5

    9b9bdcac9b346748608cc357e6040c59

  • SHA1

    8d6762e96e6d68f50eda9eb4e3ffc90c6ab1b42a

  • SHA256

    5c4ab3e38b04dedff21e70e225d8dfebad16d6c2ee9906070bc451330b0a6907

  • SHA512

    c0fa7024ad030391f807819bfc15b1b9d4a02218c9baf8289a876a9ce3c63dac3fca4e807be3e980b2c8826d23d1eb7c02c511b5787da27661d02efd46e2c046

  • SSDEEP

    24576:WCwHDqBS+qki20Ac5/SKBmJbdVWLC37BxndynToH:S6S+lWFYBdZNxndykH

Score
10/10

Malware Config

Signatures

  • AgentTesla payload 1 IoCs
  • Agenttesla family
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • EXA.rar
    .rar

    Password: 123

  • EXA/Creative EAX Settings.exe
    .exe windows:4 windows x86 arch:x86

    Password: 123

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • EXA/Creative EAX Settings.exe.config
  • EXA/Creative EAX Settings.pdb
  • EXA/EAX Console.exe
    .exe windows:4 windows x86 arch:x86

    Password: 123

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • EXA/EAX Console.pdb
  • EXA/Guna.UI2.dll
    .dll windows:4 windows x86 arch:x86

    Password: 123

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections