General
- Target New Purchase RFQ#19801.exe
- Size 406KB
- Sample201109-1992s14ree
- SHA256 4be43e080b60c1fe0c24ff6b13a48baa58e0c521a75f6586a80dee1814a04ae7
- MD5 6c5fb414b0fb6feb1ce94638d6d151ac
- SHA1 305a47e8646138b1013aa7c2cfd9270f78114a2d
- SHA512 6086649e8868d5d2ccdd1a1ffe6dacbd42cec2d7551d27c78ca8b3d006ac0a068842a0d1575ca512c37b9e44982d32e3018c60ed07881b6e7e30c6e25812dd68
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
New Purchase RFQ#19801.exe
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
New Purchase RFQ#19801.exe
Resource
win10v20201028
0 signatures
0 seconds
Malware Config
Targets
-
- Target New Purchase RFQ#19801.exe
- Size 406KB
- SHA256 4be43e080b60c1fe0c24ff6b13a48baa58e0c521a75f6586a80dee1814a04ae7
- MD5 6c5fb414b0fb6feb1ce94638d6d151ac
- SHA1 305a47e8646138b1013aa7c2cfd9270f78114a2d
- SHA512 6086649e8868d5d2ccdd1a1ffe6dacbd42cec2d7551d27c78ca8b3d006ac0a068842a0d1575ca512c37b9e44982d32e3018c60ed07881b6e7e30c6e25812dd68
- MD5 SHA1 SHA512
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Suspicious use of SetThreadContext