General
- Target 70b81c83e81cbaa0c3e0058bb061b990.exe
- Size 472KB
- Sample200722-k6r2p4bp2s
- SHA256 7e5f94868785df0e045c67a336a7add1207eccd4aef5a851f6b41b3c0579b71c
- MD5 70b81c83e81cbaa0c3e0058bb061b990
- SHA1 3bfbb7351ad944ded9b978cb792e491757d56c81
- SHA512 d0397afe1091c50055f1baf2f2c741b4b4e6b9205df38d76c06c1efcf108d68c5950fffdbc3f5ecf43acd5c4f62a634da98b72d18f9b6143d75c7964eb50bc18
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
70b81c83e81cbaa0c3e0058bb061b990.exe
Resource
win7
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
70b81c83e81cbaa0c3e0058bb061b990.exe
Resource
win10
0 signatures
0 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
smtp.yandex.com
-
Port
587
-
Username
-
Password
Donmoon1965
Targets
-
- Target 70b81c83e81cbaa0c3e0058bb061b990.exe
- Size 472KB
- SHA256 7e5f94868785df0e045c67a336a7add1207eccd4aef5a851f6b41b3c0579b71c
- MD5 70b81c83e81cbaa0c3e0058bb061b990
- SHA1 3bfbb7351ad944ded9b978cb792e491757d56c81
- SHA512 d0397afe1091c50055f1baf2f2c741b4b4e6b9205df38d76c06c1efcf108d68c5950fffdbc3f5ecf43acd5c4f62a634da98b72d18f9b6143d75c7964eb50bc18
- MD5 SHA1 SHA512
Score10/10AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
AgentTesla Payload
Suspicious use of SetThreadContext