General
- Target ogga.exe
- Size 719KB
- Sample200831-ynb92qq5tn
- SHA256 0b984d3e8a150589d7f295c6009cd856e360e44f6fe5729e18e4759536a9bd0e
- MD5 dcafb38a9edb6e817bc192630a146760
- SHA1 81a9cc1e5a2071dbd3a1a89d575c4e9866df4e90
- SHA512 36cb19030efb3b44800cd4cebaf1dd6c4735c476c75f46ffd5d5b89cc0b4483465f4532501bc529ccc3cbb0d34f68efe516bf51e0a2f0fc4f4e4eb19345010b3
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
ogga.exe
Resource
win7v200722
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
ogga.exe
Resource
win10v200722
0 signatures
0 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
mail.privateemail.com
-
Port
587
-
Username
-
Password
whyworry.,
Targets
-
- Target ogga.exe
- Size 719KB
- SHA256 0b984d3e8a150589d7f295c6009cd856e360e44f6fe5729e18e4759536a9bd0e
- MD5 dcafb38a9edb6e817bc192630a146760
- SHA1 81a9cc1e5a2071dbd3a1a89d575c4e9866df4e90
- SHA512 36cb19030efb3b44800cd4cebaf1dd6c4735c476c75f46ffd5d5b89cc0b4483465f4532501bc529ccc3cbb0d34f68efe516bf51e0a2f0fc4f4e4eb19345010b3
- MD5 SHA1 SHA512
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Suspicious use of SetThreadContext