General
-
Target
0b2a3cff3a36ae0a77ea81fd75e04b383fbddc732da110042171efdff1ebeefe.exe
-
Size
1.3MB
-
Sample
240919-g67c8avdpe
-
MD5
e443efc004a52287249fa640396233cf
-
SHA1
54752a3aab296573c973f301f91c6e76c872a4da
-
SHA256
0b2a3cff3a36ae0a77ea81fd75e04b383fbddc732da110042171efdff1ebeefe
-
SHA512
8bd9112b749b0a44e731f674712ef713e339a30e58f52c798db6404464691049e4be3026bb9266aac55b06fbe836dfb955e4a712845305a4105b039fb8ad722b
-
SSDEEP
24576:uRmJkcoQricOIQxiZY1iaCLpKPyN5f41IsNbbLxM+E9iZtnd:7JZoQrbTFZY1iaC16yN5f41Incf
Static task
static1
Behavioral task
behavioral1
Sample
0b2a3cff3a36ae0a77ea81fd75e04b383fbddc732da110042171efdff1ebeefe.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0b2a3cff3a36ae0a77ea81fd75e04b383fbddc732da110042171efdff1ebeefe.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
0b2a3cff3a36ae0a77ea81fd75e04b383fbddc732da110042171efdff1ebeefe.exe
-
Size
1.3MB
-
MD5
e443efc004a52287249fa640396233cf
-
SHA1
54752a3aab296573c973f301f91c6e76c872a4da
-
SHA256
0b2a3cff3a36ae0a77ea81fd75e04b383fbddc732da110042171efdff1ebeefe
-
SHA512
8bd9112b749b0a44e731f674712ef713e339a30e58f52c798db6404464691049e4be3026bb9266aac55b06fbe836dfb955e4a712845305a4105b039fb8ad722b
-
SSDEEP
24576:uRmJkcoQricOIQxiZY1iaCLpKPyN5f41IsNbbLxM+E9iZtnd:7JZoQrbTFZY1iaC16yN5f41Incf
-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Credentials from Password Stores: Credentials from Web Browsers
Malicious Access or copy of Web Browser Credential store.
-
Accesses Microsoft Outlook profiles
-
Suspicious use of SetThreadContext
-