Description
Agent Tesla is a remote access tool (RAT) written in visual basic.
makeve.exe
General
Target
Size
Sample
makeve.exe
136KB
200325-ajbtfx9qy2
Score
10 /10
MD5
SHA1
SHA256
SHA512
9fed11cd0c0bc367b30b08650dfba78f
48ef476625cdbc1f74b83841ffc89e4b46615d05
c7c2e3e6dc40ec793635b6f18e44223d8cbf9fb621ee0d5b374b709510fe2d9a
c884f73eb3481c129fdfa322f6d60452db98d3e9d88378a6f6b51cb88984d48e6a8d0611dbef7dc8de7d5e4cd3f142e7947f9de225590def19bb23c6836e4675
Malware Config
Extracted
| Credentials |
Protocol: smtp Host: popeorigin5.pw Port: 587 Username: sender@popeorigin5.pw Password: 12345@Plesk |
Targets
Target
MD5
Filesize
makeve.exe
9fed11cd0c0bc367b30b08650dfba78f
136KB
Score
10 /10
SHA1
SHA256
SHA512
48ef476625cdbc1f74b83841ffc89e4b46615d05
c7c2e3e6dc40ec793635b6f18e44223d8cbf9fb621ee0d5b374b709510fe2d9a
c884f73eb3481c129fdfa322f6d60452db98d3e9d88378a6f6b51cb88984d48e6a8d0611dbef7dc8de7d5e4cd3f142e7947f9de225590def19bb23c6836e4675
Tags
Signatures
-
AgentTesla
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
Suspicious use of SetThreadContext
Related Tasks
MITRE ATT&CK Matrix
Collection
Command and Control
Credential Access
Defense Evasion
Discovery
Execution
Exfiltration
Impact
Initial Access
Lateral Movement
Persistence
Privilege Escalation
Tasks