General
- Target Detalles del banco.exe
- Size 1.7MB
- Sample201109-2eq4a345wj
- SHA256 b88f05ec4ceddeed4e1d71a4b0ef5d974fee9ce770a632e3546134886635db13
- MD5 ac825f3c15ce27660d8f2f401cc1ee7e
- SHA1 d17b869407506bdf03141b171df8bab8c3747111
- SHA512 aec3a681e3ef20f558bb995deab4099bb407887934d01426d8e25cbbc67bf84c3b65ca229f2b58b624989534e7a59610a29728ac9c4895a2fbe209722e2ff70a
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
Detalles del banco.exe
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
Detalles del banco.exe
Resource
win10v20201028
0 signatures
0 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
smtp.erkonsentre.com
-
Port
587
-
Username
-
Password
mrObvWV9
Extracted
Credentials
-
Protocol
smtp
-
Host
smtp.erkonsentre.com
-
Port
587
-
Username
-
Password
mrObvWV9
Targets
-
- Target Detalles del banco.exe
- Size 1.7MB
- SHA256 b88f05ec4ceddeed4e1d71a4b0ef5d974fee9ce770a632e3546134886635db13
- MD5 ac825f3c15ce27660d8f2f401cc1ee7e
- SHA1 d17b869407506bdf03141b171df8bab8c3747111
- SHA512 aec3a681e3ef20f558bb995deab4099bb407887934d01426d8e25cbbc67bf84c3b65ca229f2b58b624989534e7a59610a29728ac9c4895a2fbe209722e2ff70a
- MD5 SHA1 SHA512
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Suspicious use of SetThreadContext