agenttesla | 95d753829083b4522ed9ff8fd9d6c8c6728cba4180ec9ccc0265398c271f6001

Sharing

General

Target

95d753829083b4522ed9ff8fd9d6c8c6728cba4180ec9ccc0265398c271f6001
Size

3.6MB
MD5

cf7a47eed27f343b17a8821eaa0ffc42
SHA1

7b330765bd74aeb7969d398f7e5139943db03ce6
SHA256

95d753829083b4522ed9ff8fd9d6c8c6728cba4180ec9ccc0265398c271f6001
SHA512

2986f5c6aa9209593f4ccbfc9f1cd26f379f17acd63d06695c24fc3064332b8f38e16deee0a0cc2b2e7f6cd9b7c6c8d5cde0d3c9cf296fd297dda0907a2e6892
SSDEEP

12288:VozA2n9dH5M2vkm0aFRv3pId9Ry9vvZJT3CqQrhryfQNRPaCieMjdvCJv1Vi0ZNF:VoNWvh1X/X

Score

10^/10

infostealer miner agenttesla darktrack lockfile m00nd3v_logger matiex shurk stormkitty surtr vulturi zeppelin masslogger mountlocker xmrig darkcomet

Malware Config

Signatures

AgentTesla payload 1 IoCs

Processes:

resource yara_rule

sample family_agenttesla
Agenttesla family
agenttesla
DarkTrack payload 1 IoCs

Processes:

resource yara_rule

sample family_darktrack
Darkcomet family
darkcomet
Darktrack family
darktrack
Detect LockFile payload 1 IoCs

Processes:

resource yara_rule

sample family_lockfile
Detected Mount Locker ransomware 1 IoCs

Processes:

resource yara_rule

sample RANSOM_mountlocker
Detects Surtr Payload 1 IoCs

Processes:

resource yara_rule

sample family_surtr
Detects Zeppelin payload 1 IoCs

Processes:

resource yara_rule

sample family_zeppelin
Lockfile family
lockfile
M00nD3v Logger payload 1 IoCs
Detects M00nD3v Logger payload in memory.
infostealer

Processes:

resource yara_rule

sample m00nd3v_logger
M00nd3v_logger family
m00nd3v_logger
MassLogger log file 1 IoCs
Detects a log file produced by MassLogger.

Processes:

resource yara_rule

sample masslogger_log_file
Masslogger family
masslogger
Matiex Main payload 1 IoCs

Processes:

resource yara_rule

sample family_matiex
Matiex family
matiex
Mountlocker family
mountlocker
Shurk Stealer payload 1 IoCs

Processes:

resource yara_rule

sample shurk_stealer
Shurk family
shurk
StormKitty payload 1 IoCs

Processes:

resource yara_rule

sample family_stormkitty
Stormkitty family
stormkitty
Surtr family
surtr
Vulturi family
vulturi
Vulturi payload 1 IoCs

Processes:

resource yara_rule

sample family_vulturi
XMRig Miner payload 1 IoCs
miner

Processes:

resource yara_rule

sample family_xmrig
Xmrig family
xmrig
Zeppelin family
zeppelin

resource	yara_rule
sample	family_agenttesla

resource	yara_rule
sample	family_darktrack

resource	yara_rule
sample	family_lockfile

resource	yara_rule
sample	RANSOM_mountlocker

resource	yara_rule
sample	family_surtr

resource	yara_rule
sample	family_zeppelin

resource	yara_rule
sample	m00nd3v_logger

resource	yara_rule
sample	masslogger_log_file

resource	yara_rule
sample	family_matiex

resource	yara_rule
sample	shurk_stealer

resource	yara_rule
sample	family_stormkitty

resource	yara_rule
sample	family_vulturi

resource	yara_rule
sample	family_xmrig

Files

95d753829083b4522ed9ff8fd9d6c8c6728cba4180ec9ccc0265398c271f6001