General
- Target FILE.EXE
- Size 904KB
- Sample200720-wt11mbemd6
- SHA256 c8d4a30dc6aa1224dd98bbb384b54e90ee845cbb0e0e591964868a0be5657897
- MD5 6b4ae4d6ecbec7b3d33b5ab23df04984
- SHA1 68d7de99ec6c56c36b21ff3b347916415c238464
- SHA512 8aa1e0443c5860d3cccf9952b5dffc776e24fc3dfd3fd41c8077a53308f2872aa1a7097484702d4e032aa2f48303a5b31f65a6b1e8ce20f6715f90c26b3b1518
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
FILE.EXE
Resource
win7
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
FILE.EXE
Resource
win10v200430
0 signatures
0 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
immersive-dlsplay.com
-
Port
587
-
Username
-
Password
E1aS#~h1dM-)
Targets
-
- Target FILE.EXE
- Size 904KB
- SHA256 c8d4a30dc6aa1224dd98bbb384b54e90ee845cbb0e0e591964868a0be5657897
- MD5 6b4ae4d6ecbec7b3d33b5ab23df04984
- SHA1 68d7de99ec6c56c36b21ff3b347916415c238464
- SHA512 8aa1e0443c5860d3cccf9952b5dffc776e24fc3dfd3fd41c8077a53308f2872aa1a7097484702d4e032aa2f48303a5b31f65a6b1e8ce20f6715f90c26b3b1518
- MD5 SHA1 SHA512
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Suspicious use of SetThreadContext