General
- Target sk4Ml.exe
- Size 1.4MB
- Sample201109-7276f938vx
- SHA256 84fbfaff31bef0f0bdb851ab257a25e9b65e10ceaa1b7c93a0e3b9fbafcc8d41
- MD5 c78facb28580ecc5a518b8dabec5fc41
- SHA1 f95157dfe8964f44d108cd2f1f1f19fea4a2da44
- SHA512 09c6c928f469d211a7ee2f769f94709de0ae7df8fbe20f4bf6da645d7a75d08a2672a24c8ea2b29e703f43ec7764387831490195d6225cf35d208f4aa69e982a
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
sk4Ml.exe
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
sk4Ml.exe
Resource
win10v20201028
0 signatures
0 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
mail.grupo-pc.com
-
Port
587
-
Username
-
Password
karaco2017pc
Extracted
Credentials
-
Protocol
smtp
-
Host
mail.grupo-pc.com
-
Port
587
-
Username
-
Password
karaco2017pc
Targets
-
- Target sk4Ml.exe
- Size 1.4MB
- SHA256 84fbfaff31bef0f0bdb851ab257a25e9b65e10ceaa1b7c93a0e3b9fbafcc8d41
- MD5 c78facb28580ecc5a518b8dabec5fc41
- SHA1 f95157dfe8964f44d108cd2f1f1f19fea4a2da44
- SHA512 09c6c928f469d211a7ee2f769f94709de0ae7df8fbe20f4bf6da645d7a75d08a2672a24c8ea2b29e703f43ec7764387831490195d6225cf35d208f4aa69e982a
- MD5 SHA1 SHA512
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Drops startup file
-
Suspicious use of SetThreadContext