General
- Target q6U9sgHlYJYOnFZ.exe
- Size 1.2MB
- Sample200717-vv99vkd5fx
- SHA256 8f4df940d9a199c45165a84eeb227c027203a66713ca8ea602ccf28e75e3b0bc
- MD5 fbba71a1edc6d611c0f959d2b775509c
- SHA1 7349960af6f9c5a76084b57fa1b2f0976fb6ce84
- SHA512 941333eca09a0715ddd5d23881c9fdb8f759066ccbe88f77db4fa91bafe62fe7a5accbbd62f4970f244b2a27b8123b32ba2d49cf774baa33e2938970fc16f4a5
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
q6U9sgHlYJYOnFZ.exe
Resource
win7
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
q6U9sgHlYJYOnFZ.exe
Resource
win10
0 signatures
0 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
mail.privateemail.com
-
Port
587
-
Username
-
Password
TESTIMONY@123
Targets
-
- Target q6U9sgHlYJYOnFZ.exe
- Size 1.2MB
- SHA256 8f4df940d9a199c45165a84eeb227c027203a66713ca8ea602ccf28e75e3b0bc
- MD5 fbba71a1edc6d611c0f959d2b775509c
- SHA1 7349960af6f9c5a76084b57fa1b2f0976fb6ce84
- SHA512 941333eca09a0715ddd5d23881c9fdb8f759066ccbe88f77db4fa91bafe62fe7a5accbbd62f4970f244b2a27b8123b32ba2d49cf774baa33e2938970fc16f4a5
- MD5 SHA1 SHA512
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Suspicious use of SetThreadContext