General
-
Target
ab825c652ae9f0459ee6ebd3599f5f42b7a683d3e99f2ba46b5955b1102163d5
-
Size
655KB
-
Sample
241224-bf1vvsxnal
-
MD5
820fda11e50f1642e4f359ef46dfcd21
-
SHA1
1d8bba6f4de38a11c6a89d60a0b38a63855b502d
-
SHA256
ab825c652ae9f0459ee6ebd3599f5f42b7a683d3e99f2ba46b5955b1102163d5
-
SHA512
01d874ad361c5ed86d212becb70681649245ae80fd424d98cf5761e4346e0e0575506cbe1d034fb292e9f28094c12f14ea1d104f43f0d6650efa3c18b8e09c4f
-
SSDEEP
12288:p0MbE1peY8a3fCpSp/RCJ7Fp05KEmyPpxY2ZiePI4uHhC+N53:eMbkJvfwpSvRZMH0M3
Static task
static1
Behavioral task
behavioral1
Sample
TT copy swift.exe
Resource
win7-20240903-en
Malware Config
Targets
-
-
Target
TT copy swift.exe
-
Size
1.1MB
-
MD5
cd830b522581911dec021dc5f30adb39
-
SHA1
fdc03e45138cffb5d6723f6f01d29c5ffd9df1d0
-
SHA256
819534461b8b100c7ab9a8b777ef9dbe96180bf899cbe8c5406d464affb61c26
-
SHA512
c669225043d8e782d7f394e97da98b764e04edeaeacb12f18705ecb49084575ccbe42e889c7251c2a7fff4352d4441f7cfeb20e560f51988ee0d46ef334ab2d8
-
SSDEEP
24576:XCdxte/80jYLT3U1jfsWaizsBb4lRHrhO5Q:mw80cTsjkWaizs49
-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Agenttesla family
-
Suspicious use of SetThreadContext
-