General
- Target Catalogue list Specification and prices.pdf.exe
- Size 458KB
- Sample200716-4rvfbag3rx
- SHA256 3d0fc511748582c4c2d6a1e46d10f1fe8116803ab7400d571e43997fb1f23201
- MD5 fb98db345b2fb2f6980adc99d127300d
- SHA1 dce0b79372b4b975cd131036d01d43ddbca7667b
- SHA512 813ed3710cb4998ebf98da99e412b1353321e0835f726f2c561063c25840db9564ff1f95c3f2d268c0385a36ab34c771f4d9ac245cac008734c38349f65e6c11
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
Catalogue list Specification and prices.pdf.exe
Resource
win7v200430
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
Catalogue list Specification and prices.pdf.exe
Resource
win10
0 signatures
0 seconds
Malware Config
Extracted
Credentials
-
Protocol
smtp
-
Host
smtp.millndustries.com
-
Port
587
-
Username
-
Password
+Tu#4z:i6koZ
Targets
-
- Target Catalogue list Specification and prices.pdf.exe
- Size 458KB
- SHA256 3d0fc511748582c4c2d6a1e46d10f1fe8116803ab7400d571e43997fb1f23201
- MD5 fb98db345b2fb2f6980adc99d127300d
- SHA1 dce0b79372b4b975cd131036d01d43ddbca7667b
- SHA512 813ed3710cb4998ebf98da99e412b1353321e0835f726f2c561063c25840db9564ff1f95c3f2d268c0385a36ab34c771f4d9ac245cac008734c38349f65e6c11
- MD5 SHA1 SHA512
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Reads data files stored by FTP clients
Tries to access configuration files associated with programs like FileZilla.
-
Reads user/profile data of local email clients
Email clients store some user data on disk where infostealers will often target it.
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.