General
- Target letter of intent.pdf.exe
- Size 473KB
- Sample201109-cxthc5vv1x
- SHA256 9ac41e398d66b8dbd2fe35e5fdfa340d426f8e4b2fe35de7c338c10290b68429
- MD5 80d2a2bad8322cc65001d19b4203f61b
- SHA1 c1f2ea89b8e99b8348bb8c9e6891d8071d865ac2
- SHA512 f36f1e3284b7d1ccbfb9a690d03a8298de0600234d6d37e465c92ff6e56b0893404ab9c9697656587796c74e979d651da861dd39823bfd9431a2460f0e15d0fd
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
letter of intent.pdf.exe
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
letter of intent.pdf.exe
Resource
win10v20201028
0 signatures
0 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
mail.oilexindia.com
-
Port
587
-
Username
-
Password
Kamal@2019
Extracted
Credentials
-
Protocol
smtp
-
Host
mail.oilexindia.com
-
Port
587
-
Username
-
Password
Kamal@2019
Targets
-
- Target letter of intent.pdf.exe
- Size 473KB
- SHA256 9ac41e398d66b8dbd2fe35e5fdfa340d426f8e4b2fe35de7c338c10290b68429
- MD5 80d2a2bad8322cc65001d19b4203f61b
- SHA1 c1f2ea89b8e99b8348bb8c9e6891d8071d865ac2
- SHA512 f36f1e3284b7d1ccbfb9a690d03a8298de0600234d6d37e465c92ff6e56b0893404ab9c9697656587796c74e979d651da861dd39823bfd9431a2460f0e15d0fd
- MD5 SHA1 SHA512
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Suspicious use of SetThreadContext