General
- Target RFQ REF R2100131410.pdf (2).exe
- Size 422KB
- Sample200805-xvprdydvxa
- SHA256 7f3d3f1008ceebb52921ebf9519ae7f84f9015ee4f7dcda28cedd5271737967f
- MD5 0253fc675a74d862a070e969154d0cd6
- SHA1 2834d4fcdca82a4835adf006810705a386ec8915
- SHA512 11969a01f965b68a1346f01adbb509342ec2d9744253f7614823d75e4063ec26cd16257caf328f9b1ef6b5ea4eab885e5d39584861f693f6ee6f8c023a0e2129
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
RFQ REF R2100131410.pdf (2).exe
Resource
win7
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
RFQ REF R2100131410.pdf (2).exe
Resource
win10
0 signatures
0 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
us2.smtp.mailhostbox.com
-
Port
587
-
Username
-
Password
sOeKk#E6
Targets
-
- Target RFQ REF R2100131410.pdf (2).exe
- Size 422KB
- SHA256 7f3d3f1008ceebb52921ebf9519ae7f84f9015ee4f7dcda28cedd5271737967f
- MD5 0253fc675a74d862a070e969154d0cd6
- SHA1 2834d4fcdca82a4835adf006810705a386ec8915
- SHA512 11969a01f965b68a1346f01adbb509342ec2d9744253f7614823d75e4063ec26cd16257caf328f9b1ef6b5ea4eab885e5d39584861f693f6ee6f8c023a0e2129
- MD5 SHA1 SHA512
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Suspicious use of SetThreadContext