General
-
Target
11122024_0132_10122024_RFQ-3155210000464320000000632100.tgz
-
Size
976KB
-
Sample
241211-b4s5xstqhj
-
MD5
dc6a1897828ecb4cd9cc904fe3e50d3a
-
SHA1
b331305aa793ece295688be245d0e5452a9579f8
-
SHA256
11412c06165ee1ea97fb9e835ef150cf0ea9a92129e78cafed30d1dedf72c8c6
-
SHA512
9e8cdeb4f54b8fb2575e0ee4c5e522b79459e085d866b961f877f207562d4d08ebf840c4e663943361a8d0b379271bca20c5c09c3691db35a8e8076c4eba116a
-
SSDEEP
12288:Lqf5a+xz0ont4ljTb7qXJU+VG3ovttc4W+LsVhFVUKZI0K8J8Y0SA3:LIaLonivuRb3fGhFVUMDpJqb
Malware Config
Targets
-
-
Target
RFQ- 3155210000464320000000632100.exe
-
Size
250.0MB
-
MD5
17407ddf37f0c94ad2ca5da49fa07752
-
SHA1
b9f49c902ab789a9f1a5e153a17c31397b989afd
-
SHA256
2a482aa14bd5cc70b2b0aa2df84b3f2d3528adbf5727c7405d33cb2a04e13840
-
SHA512
418a2049f0ec4be124c80b165707eed6814fb68c21da187939e5bbffbf7f8bc8f24db236e719e987389dbc51fb097e08097ea7d52f5024d9af71d1b0eab59f9d
-
SSDEEP
24576:Uu6J33O0c+JY5UZ+XC0kGso6FagB3qzFV0YbfJ7Zh6WY:uu0c++OCvkGs9FagB3qZL7RY
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Agenttesla family
-
Suspicious use of SetThreadContext
-