General
- Target crypt.exe
- Size 473KB
- Sample200629-8t6z9bas3s
- SHA256 47ce52b1f15fd49510cfba9d86dce468c950d0a5bd7866f41a7affe9e9508f23
- MD5 248371070102d68dfd1afa5ecdaf33dc
- SHA1 b72b3df51727978efd81351df3c5286844b51b23
- SHA512 8e3e2b3d49110eb2ca3a3231838105ceefa278ee04a5175ef6a915c5adb5c7ee140d13445cd23ee237e7009e5b0e56c57febaed529aab43ca1d8ea84bb5deb11
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
crypt.exe
Resource
win7
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
crypt.exe
Resource
win10v200430
0 signatures
0 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
smtp.yandex.com
-
Port
587
-
Username
-
Password
123@Ossymbo
Targets
-
- Target crypt.exe
- Size 473KB
- SHA256 47ce52b1f15fd49510cfba9d86dce468c950d0a5bd7866f41a7affe9e9508f23
- MD5 248371070102d68dfd1afa5ecdaf33dc
- SHA1 b72b3df51727978efd81351df3c5286844b51b23
- SHA512 8e3e2b3d49110eb2ca3a3231838105ceefa278ee04a5175ef6a915c5adb5c7ee140d13445cd23ee237e7009e5b0e56c57febaed529aab43ca1d8ea84bb5deb11
- MD5 SHA1 SHA512
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Suspicious use of SetThreadContext