General
-
Target
PO#0010710619_&_.exe
-
Size
547KB
-
Sample
200710-h23ltb1vwe
-
MD5
abf87baf38d5003e0e69b83289444917
-
SHA1
5ef6045701689fd8852e3eae580261fcd81e1d5d
-
SHA256
ae402313cc96abc092b41ad2fe8f3b8dd5fdc9c75141dcec97619e8e90a43867
-
SHA512
1ccdff2c0da62054c4b4be602b377f3d8822d6901b763f2ff17a8979253557221efe365e2afb89a9ff2f107f16ceff68a25050a62f45f4a55de0a7a2bdc82d26
Static task
static1
Behavioral task
behavioral1
Sample
PO#0010710619_&_.exe
Resource
win7
Behavioral task
behavioral2
Sample
PO#0010710619_&_.exe
Resource
win10v200430
Malware Config
Extracted
agenttesla
Protocol: smtp- Host:
smtp.yandex.com - Port:
587 - Username:
[email protected] - Password:
41k2c4yfVG
Targets
-
-
Target
PO#0010710619_&_.exe
-
Size
547KB
-
MD5
abf87baf38d5003e0e69b83289444917
-
SHA1
5ef6045701689fd8852e3eae580261fcd81e1d5d
-
SHA256
ae402313cc96abc092b41ad2fe8f3b8dd5fdc9c75141dcec97619e8e90a43867
-
SHA512
1ccdff2c0da62054c4b4be602b377f3d8822d6901b763f2ff17a8979253557221efe365e2afb89a9ff2f107f16ceff68a25050a62f45f4a55de0a7a2bdc82d26
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Suspicious use of SetThreadContext
-