General
- Target 2026-07-18_590897338e19fdcd5fb69d198f60d4df_agent-tesla_backswap_elex_stop_swisyn
- Size 886KB
- Sample260718-bfemmae17x
- SHA256 5d230c18d2e0b55f6faf2f2fa6e9968d9d4860c17810f59ba5e055ce99820088
- MD5 590897338e19fdcd5fb69d198f60d4df
- SHA1 c9842c5f1e9a62da32ee416d428d6e02d76f2096
- SHA512 27ea1185a9340597f70a8c968caaf248b354cacf49cf3fa7de8b3ade5c7a122f3e74e97ada4ad695013aa748e8b04f7ef3130399a365c2f9596f7bcbb7bdb116
- SSDEEP 12288:PFUNDataWzgMg7v3qnCi3ErQohh0F4wCJ8lnyrQELlmo/4jSO9fg8:PFOasaHMv6CzrjInyrQELX/eB9fZ
- TLSH T19915BF13BBD28076D95279B0187BE32AFB356D290322DC8767E13F225E31142AB76357
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-18_590897338e19fdcd5fb69d198f60d4df_agent-tesla_backswap_elex_stop_swisyn.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-18_590897338e19fdcd5fb69d198f60d4df_agent-tesla_backswap_elex_stop_swisyn.exe
Resource
win11ltsc2024-20260710-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_590897338e19fdcd5fb69d198f60d4df_agent-tesla_backswap_elex_stop_swisyn
- Size 886KB
- SHA256 5d230c18d2e0b55f6faf2f2fa6e9968d9d4860c17810f59ba5e055ce99820088
- MD5 590897338e19fdcd5fb69d198f60d4df
- SHA1 c9842c5f1e9a62da32ee416d428d6e02d76f2096
- SHA512 27ea1185a9340597f70a8c968caaf248b354cacf49cf3fa7de8b3ade5c7a122f3e74e97ada4ad695013aa748e8b04f7ef3130399a365c2f9596f7bcbb7bdb116
- SSDEEP 12288:PFUNDataWzgMg7v3qnCi3ErQohh0F4wCJ8lnyrQELlmo/4jSO9fg8:PFOasaHMv6CzrjInyrQELX/eB9fZ
- TLSH T19915BF13BBD28076D95279B0187BE32AFB356D290322DC8767E13F225E31142AB76357
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2