General
-
Target
f00ca56d8ce8b8f541efd24be1fd83e9ea847d75c448f81b7eb95174651a5e30.zip
-
Size
752KB
-
Sample
241129-ew3wyavmgw
-
MD5
a1e4c6d4419bf76446bb53c900b5732c
-
SHA1
86bb127f0de0e7b20641925eb65c2a991d188d7e
-
SHA256
f00ca56d8ce8b8f541efd24be1fd83e9ea847d75c448f81b7eb95174651a5e30
-
SHA512
8203c34b0607aee514f87b65ab3528d7b13cb45babbc93909550e5feb7ef193e26a3644dae5762a266708613fa0fef96fa64fca6c1eae323a88dc905fbfc7cff
-
SSDEEP
12288:X/fA7/l+4RWg4fBe58cvyAnxDU/iREuTJ+y1h6gMMt1JBu7uUBckyFai+sfuUTn:Al+4Wf0uMtl+2JNh6VQc7udb+0VTn
Static task
static1
Behavioral task
behavioral1
Sample
RFQ.exe
Resource
win7-20241023-en
Malware Config
Targets
-
-
Target
RFQ.exe
-
Size
1.2MB
-
MD5
f16382c47d6df2809c980a0e8dc937db
-
SHA1
2bbf3d4682a253d373f01ead1cb86c8e3c269ae3
-
SHA256
88fa1f0c7c938dd906f2757b1df097ce40dbaa45740960a0457c41fd93c9285a
-
SHA512
7a5cb4b2ca4724ca3f5474baa97e58c991f9bd56b8a0c323dcc5027a43ee876fae85bfdbd3dcbf910b8a47ff50d777ef6619d52fca3758150e9561c986934736
-
SSDEEP
24576:8tb20pkaCqT5TBWgNQ7aGI6jcC7uFrUQLb6A:lVg5tQ7aGI6IlfP5
-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Agenttesla family
-
Suspicious use of SetThreadContext
-