General
- Target Request For Qoutation(RFQ_#20200219).doc.gz.exe
- Size 673KB
- Sample200821-2wdd8y9rt2
- SHA256 3bf2467d7e7031b0af1fccfbc9d67fc29b572aaa64b1df6a77eed00cee768a04
- MD5 9792a16de26987d265ab4e89a7347022
- SHA1 393515ae18ca62249ca37b536907272152b97077
- SHA512 078f8ae5b68959a27b9e2124695f33327712ddec05ff96626c57a0af8c849dba02e4bdee9d34da9e20d0b62624b0a292056aa452fa60990d9db1c451e370e931
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
Request For Qoutation(RFQ_#20200219).doc.gz.exe
Resource
win7v200722
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
Request For Qoutation(RFQ_#20200219).doc.gz.exe
Resource
win10v200722
0 signatures
0 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
us2.smtp.mailhostbox.com
-
Port
587
-
Username
-
Password
riches22@123456
Targets
-
- Target Request For Qoutation(RFQ_#20200219).doc.gz.exe
- Size 673KB
- SHA256 3bf2467d7e7031b0af1fccfbc9d67fc29b572aaa64b1df6a77eed00cee768a04
- MD5 9792a16de26987d265ab4e89a7347022
- SHA1 393515ae18ca62249ca37b536907272152b97077
- SHA512 078f8ae5b68959a27b9e2124695f33327712ddec05ff96626c57a0af8c849dba02e4bdee9d34da9e20d0b62624b0a292056aa452fa60990d9db1c451e370e931
- MD5 SHA1 SHA512
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Suspicious use of SetThreadContext