General
- Target Maxim Contract-PO20200313.exe
- Size 533KB
- Sample200624-c81m57mpks
- SHA256 576ad625aa5f0da23353269fd85938a85d0e1a723c2cbe4d05b8a43ba301930e
- MD5 44583d81b074cf767f0d8cce2d29d718
- SHA1 7848b1dd279c9c758e749b94dfd1ab7a10eec46a
- SHA512 f7feeadf97167efd5258178da3d7f6cfd63490129cdd7b463b3d19ffb2f9e4c53e71d3c79b071965f1d1f8b34eb74627e801b4ef1442fea392489f64f9c96569
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
Maxim Contract-PO20200313.exe
Resource
win7v200430
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
Maxim Contract-PO20200313.exe
Resource
win10v200430
0 signatures
0 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
mail.privateemail.com
-
Port
587
-
Username
-
Password
success21
Extracted
Credentials
-
Protocol
smtp
-
Host
mail.privateemail.com
-
Port
587
-
Username
-
Password
success21
Targets
-
- Target Maxim Contract-PO20200313.exe
- Size 533KB
- SHA256 576ad625aa5f0da23353269fd85938a85d0e1a723c2cbe4d05b8a43ba301930e
- MD5 44583d81b074cf767f0d8cce2d29d718
- SHA1 7848b1dd279c9c758e749b94dfd1ab7a10eec46a
- SHA512 f7feeadf97167efd5258178da3d7f6cfd63490129cdd7b463b3d19ffb2f9e4c53e71d3c79b071965f1d1f8b34eb74627e801b4ef1442fea392489f64f9c96569
- MD5 SHA1 SHA512
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Suspicious use of SetThreadContext