General
- Target H022020000006222.exe
- Size 671KB
- Sample201014-k3zsz9tycx
- SHA256 bae353be3d64c66c76ca33280e436b02460497265e503b772db81c2e84971cba
- MD5 d2c2926892f0289c9d25ad518084f029
- SHA1 9d2c80fa5d5aad4c14b77e45802c3bf75b4c3370
- SHA512 2fa39347b3f5979b8f06454dbbf85ebefc6e672e7711700fd4497f71cc3f36995988bb63715cd1a4a0e3743fb2cf02f85cb98c9b7490cd99f284f6dab0a9ce42
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
H022020000006222.exe
Resource
win7v200722
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
H022020000006222.exe
Resource
win10v200722
0 signatures
0 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
smtp.yandex.com
-
Port
587
-
Username
-
Password
Company@12
Targets
-
- Target H022020000006222.exe
- Size 671KB
- SHA256 bae353be3d64c66c76ca33280e436b02460497265e503b772db81c2e84971cba
- MD5 d2c2926892f0289c9d25ad518084f029
- SHA1 9d2c80fa5d5aad4c14b77e45802c3bf75b4c3370
- SHA512 2fa39347b3f5979b8f06454dbbf85ebefc6e672e7711700fd4497f71cc3f36995988bb63715cd1a4a0e3743fb2cf02f85cb98c9b7490cd99f284f6dab0a9ce42
- MD5 SHA1 SHA512
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Suspicious use of SetThreadContext