General
- Target uzz.exe
- Size 753KB
- Sample200831-qa3b1ej44j
- SHA256 09d83ebdd5d99fe1373d3b30798800503a4c625884b1c1e3f4e190d7b4d0d9da
- MD5 e1ce84c01e67aaca450cdfc86642053a
- SHA1 f290694f99c9346c4e590299015a12e54b864138
- SHA512 f6e8c12baa648fe5fc8873e3136b7e50377f363b494393e434501dd4c616f1c63a623255771b179631ff4fb683bfc3a0c1ebb1990606503ff04e5b02435045ef
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
uzz.exe
Resource
win7v200722
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
uzz.exe
Resource
win10
0 signatures
0 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
mail.privateemail.com
-
Port
587
-
Username
-
Password
LifeDrama@123
Targets
-
- Target uzz.exe
- Size 753KB
- SHA256 09d83ebdd5d99fe1373d3b30798800503a4c625884b1c1e3f4e190d7b4d0d9da
- MD5 e1ce84c01e67aaca450cdfc86642053a
- SHA1 f290694f99c9346c4e590299015a12e54b864138
- SHA512 f6e8c12baa648fe5fc8873e3136b7e50377f363b494393e434501dd4c616f1c63a623255771b179631ff4fb683bfc3a0c1ebb1990606503ff04e5b02435045ef
- MD5 SHA1 SHA512
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Suspicious use of SetThreadContext