General
-
Target
922cc794b4613818f52db039f6f8486322589411ffa8d1f6a8c3138cb6aaf06c
-
Size
1.4MB
-
Sample
240429-bj2lkaeb8t
-
MD5
d6d32f80cc7488c52e7e78eb10c1d8ab
-
SHA1
5278b0bcecaae17fbdf0e4ab829aa7d07ca3c3c4
-
SHA256
922cc794b4613818f52db039f6f8486322589411ffa8d1f6a8c3138cb6aaf06c
-
SHA512
2ffab91b8564544a256fbb931bdafcb5926601fdfb5af46a6fe893053123483b7bc534f4a02731b90a12edb29250b5352fd2809f603cc458976668513bb6e890
-
SSDEEP
24576:er37a44E29ZkmH7WaIje+YPxiVp5RhwGzw:S37a4rwhbWLhSUVprhf
Static task
static1
Behavioral task
behavioral1
Sample
الطلب-I122825.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
الطلب-I122825.exe
Resource
win10v2004-20240419-en
Malware Config
Extracted
agenttesla
Protocol: ftp- Host:
ftp://ftp.indra-precision.co.th - Port:
21 - Username:
logsbin@indra-precision.co.th - Password:
UW8f$y[fBOEs
Targets
-
-
Target
الطلب-I122825.exe
-
Size
829KB
-
MD5
51116c5144a1a3cd93caad2c96b94661
-
SHA1
9ca64b630765ac52dd867296d4821f5592c7748a
-
SHA256
b564648ffa24fb0af63ba4ffdd4c161bac6f0b62863cfcbd80281769ca4a4666
-
SHA512
2e71333748aa81396051613def75450f8ff3802ac62140709d86d6c8c73e582bfa2c06c6e32fd97ae2286f364b13f49654bb348d9f89d136005812586006f511
-
SSDEEP
24576:or37a44E29ZkmH7WaIje+YPxiVp5RhwGzw:Y37a4rwhbWLhSUVprhf
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-