General
- Target RFQ Order Diagram.exe
- Size 893KB
- Sample200708-esyvdd1392
- SHA256 0d07c8344ef01c56baf0fbb085a23d8ebce502082ae9461bfd60fd38ea10f829
- MD5 d2b3ddebd7c42a7fef79345d88662ea3
- SHA1 4f41f4fe60b7c2cd6efefc319777c53d08208277
- SHA512 16205aec18105a2d0ca8bdab9dcad8a30b8ac16bdda2885ee10e2e5a2ec123a872a43867623bbf3a92f191d37a4c84076bc38b2e06fe073a48eb36e7b6c7ecab
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
RFQ Order Diagram.exe
Resource
win7
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
RFQ Order Diagram.exe
Resource
win10
0 signatures
0 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
mail.privateemail.com
-
Port
587
-
Username
-
Password
Naija81,J
Targets
-
- Target RFQ Order Diagram.exe
- Size 893KB
- SHA256 0d07c8344ef01c56baf0fbb085a23d8ebce502082ae9461bfd60fd38ea10f829
- MD5 d2b3ddebd7c42a7fef79345d88662ea3
- SHA1 4f41f4fe60b7c2cd6efefc319777c53d08208277
- SHA512 16205aec18105a2d0ca8bdab9dcad8a30b8ac16bdda2885ee10e2e5a2ec123a872a43867623bbf3a92f191d37a4c84076bc38b2e06fe073a48eb36e7b6c7ecab
- MD5 SHA1 SHA512
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Suspicious use of SetThreadContext