General
- Target crypt.exe
- Size 420KB
- Sample200703-k29hwvlez6
- SHA256 cf902bef4285e284b94b032a1636f481cfc64cece90489b6055c7227536bbaa5
- MD5 df6472ab2e61b9ca8da9e5c64ffbefb7
- SHA1 76a25cc1b21b522e8911f03a72455a1eb49f84a9
- SHA512 ddcb8d50fcf98a628f7c295408e12467296e2a4c3b94ea42da2a0c46b6564241f11b138e60fc839882a8222998fd79ee2212707b44cb45546d310e2f3dc7d832
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
crypt.exe
Resource
win7
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
crypt.exe
Resource
win10v200430
0 signatures
0 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
smtp.yandex.com
-
Port
587
-
Username
-
Password
123@Ossymbo
Targets
-
- Target crypt.exe
- Size 420KB
- SHA256 cf902bef4285e284b94b032a1636f481cfc64cece90489b6055c7227536bbaa5
- MD5 df6472ab2e61b9ca8da9e5c64ffbefb7
- SHA1 76a25cc1b21b522e8911f03a72455a1eb49f84a9
- SHA512 ddcb8d50fcf98a628f7c295408e12467296e2a4c3b94ea42da2a0c46b6564241f11b138e60fc839882a8222998fd79ee2212707b44cb45546d310e2f3dc7d832
- MD5 SHA1 SHA512
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Suspicious use of SetThreadContext