General
- Target Document.pdf.exe
- Size 1.7MB
- Sample201109-511dthzv22
- SHA256 6842cd8b476e667a67288d2fbdd42c862ff440ad495dcedef493bc132e8ddd14
- MD5 30694afd95d7441ee99dc7744eb9127f
- SHA1 15c340eb598e38090e802a8be0dc39d112aa3ee0
- SHA512 fbf77e36c884496b33db7b60328154369f680b4d8e4120a8b45e8251079c67bb2beef0b724fa9afe869216009860807671c776180d9507d3e2ffd44689fe10e2
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
Document.pdf.exe
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
Document.pdf.exe
Resource
win10v20201028
0 signatures
0 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
smtp.yandex.com
-
Port
587
-
Username
-
Password
stanbest123
Extracted
Credentials
-
Protocol
smtp
-
Host
smtp.yandex.com
-
Port
587
-
Username
-
Password
stanbest123
Targets
-
- Target Document.pdf.exe
- Size 1.7MB
- SHA256 6842cd8b476e667a67288d2fbdd42c862ff440ad495dcedef493bc132e8ddd14
- MD5 30694afd95d7441ee99dc7744eb9127f
- SHA1 15c340eb598e38090e802a8be0dc39d112aa3ee0
- SHA512 fbf77e36c884496b33db7b60328154369f680b4d8e4120a8b45e8251079c67bb2beef0b724fa9afe869216009860807671c776180d9507d3e2ffd44689fe10e2
- MD5 SHA1 SHA512
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Suspicious use of SetThreadContext