General
- Target Scan 0008052020.exe
- Size 512KB
- Sample201109-2g47j5azkn
- SHA256 dd1b5d3e6e56c8b5fceabda45b1a1f9a8a8da54f8cfda42b0c207d18aa0cdc5f
- MD5 242724ac01a3f5d6afa2627eddd73228
- SHA1 c32f31b0980de95c98a937c3b90b232f62c37c0b
- SHA512 0ee4134aa5e8b1fb96a31ff7ae8e5a6a32710004d2397fb39f419ebe7f3b5ab22762ee8c99c0dd61c29684a3a88cd1fc60540605e8a85062a1a5c84fa1fbf259
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
Scan 0008052020.exe
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
Scan 0008052020.exe
Resource
win10v20201028
0 signatures
0 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
smtp.yandex.com
-
Port
587
-
Username
-
Password
Great@12345
Extracted
Credentials
-
Protocol
smtp
-
Host
smtp.yandex.com
-
Port
587
-
Username
-
Password
Great@12345
Targets
-
- Target Scan 0008052020.exe
- Size 512KB
- SHA256 dd1b5d3e6e56c8b5fceabda45b1a1f9a8a8da54f8cfda42b0c207d18aa0cdc5f
- MD5 242724ac01a3f5d6afa2627eddd73228
- SHA1 c32f31b0980de95c98a937c3b90b232f62c37c0b
- SHA512 0ee4134aa5e8b1fb96a31ff7ae8e5a6a32710004d2397fb39f419ebe7f3b5ab22762ee8c99c0dd61c29684a3a88cd1fc60540605e8a85062a1a5c84fa1fbf259
- MD5 SHA1 SHA512
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Suspicious use of SetThreadContext