General
-
Target
2594286c000de619742c12df6d953336b146f443440e06b52cd843a67adc2c31
-
Size
305KB
-
Sample
240429-bjyjxaeb7z
-
MD5
28ae076f4ca731676c7cf34ba3846a1e
-
SHA1
d8ea5ab8d555a8b1580414195c3b12719b035251
-
SHA256
2594286c000de619742c12df6d953336b146f443440e06b52cd843a67adc2c31
-
SHA512
f6e77a43da510517de83b94cb94bbe92c368262b09dba4a9cc7f18226a114d4626e82b37e6bda9f2df4a244a539d50731caa238fb584ab0b768448d7dd00f393
-
SSDEEP
6144:qVvHmauqhqL04OUOxJbwBFF+rVdDGElBrD+QR:qxHmauqhaOUOxJbwuVZGEiQR
Malware Config
Extracted
agenttesla
Protocol: smtp- Host:
godwillxzn.com - Port:
587 - Username:
frank1@godwillxzn.com - Password:
,~B=)#zzr)o= - Email To:
frank@godwillxzn.com
Targets
-
-
Target
2594286c000de619742c12df6d953336b146f443440e06b52cd843a67adc2c31
-
Size
305KB
-
MD5
28ae076f4ca731676c7cf34ba3846a1e
-
SHA1
d8ea5ab8d555a8b1580414195c3b12719b035251
-
SHA256
2594286c000de619742c12df6d953336b146f443440e06b52cd843a67adc2c31
-
SHA512
f6e77a43da510517de83b94cb94bbe92c368262b09dba4a9cc7f18226a114d4626e82b37e6bda9f2df4a244a539d50731caa238fb584ab0b768448d7dd00f393
-
SSDEEP
6144:qVvHmauqhqL04OUOxJbwBFF+rVdDGElBrD+QR:qxHmauqhaOUOxJbwuVZGEiQR
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Detect ZGRat V1
-
ZGRat
ZGRat is remote access trojan written in C#.
-