General
- Target DİLMER MAKINA LTD STI ORDER_PDF.exe
- Size 511KB
- Sample201109-dbt5bjerj6
- SHA256 1d2a780d54c81fa2a4990bce7f008d8a1445ee1a47ea40db306dad6994285845
- MD5 7589e60d6abff5a942496d4dfc936e32
- SHA1 bcdc699400d88c0341e28c45a9a0b0a215a25195
- SHA512 fc28033573365db5ef55e48ea73f9b7f81c0ce64e4b5edd706c9e7494c28dbb6c2e15674a61d30f6fb67bad4f81c896509b4be35d279987bb7663736660f3437
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DİLMER MAKINA LTD STI ORDER_PDF.exe
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
DİLMER MAKINA LTD STI ORDER_PDF.exe
Resource
win10v20201028
0 signatures
0 seconds
Malware Config
Extracted
Credentials
-
Protocol
smtp
-
Host
mail.greebals.gr
-
Port
587
-
Username
-
Password
g#BE=fpMXx@B
Targets
-
- Target DİLMER MAKINA LTD STI ORDER_PDF.exe
- Size 511KB
- SHA256 1d2a780d54c81fa2a4990bce7f008d8a1445ee1a47ea40db306dad6994285845
- MD5 7589e60d6abff5a942496d4dfc936e32
- SHA1 bcdc699400d88c0341e28c45a9a0b0a215a25195
- SHA512 fc28033573365db5ef55e48ea73f9b7f81c0ce64e4b5edd706c9e7494c28dbb6c2e15674a61d30f6fb67bad4f81c896509b4be35d279987bb7663736660f3437
- MD5 SHA1 SHA512
Score10/10AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
AgentTesla Payload
Suspicious use of SetThreadContext