General
- Target good.exe
- Size 395KB
- Sample200624-m323ns1fd6
- SHA256 a8b678fcf25d4abc38f6fbd5bb7b1d79b90f111967e956f695f36e5a058d1419
- MD5 2d53a134cf2c61d62f0906dbf2692b63
- SHA1 680b29eccd998e2a6c3df949aef9715d4875b2a8
- SHA512 689d6eb5c8b18412fb080b91bd7e4751c65b41884fc0ce39a65106be25752aa1f0d5515220439aba8ab9a4a6089d8dd820c5c9d2b54901535b1103f979b3b700
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
good.exe
Resource
win7
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
good.exe
Resource
win10
0 signatures
0 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
smtp.yandex.com
-
Port
587
-
Username
-
Password
123@Ossymbo
Targets
-
- Target good.exe
- Size 395KB
- SHA256 a8b678fcf25d4abc38f6fbd5bb7b1d79b90f111967e956f695f36e5a058d1419
- MD5 2d53a134cf2c61d62f0906dbf2692b63
- SHA1 680b29eccd998e2a6c3df949aef9715d4875b2a8
- SHA512 689d6eb5c8b18412fb080b91bd7e4751c65b41884fc0ce39a65106be25752aa1f0d5515220439aba8ab9a4a6089d8dd820c5c9d2b54901535b1103f979b3b700
- MD5 SHA1 SHA512
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Suspicious use of SetThreadContext