General
- Target Inquriy.exe
- Size 1.4MB
- Sample201109-exxdtc6l2a
- SHA256 96e185894358d0c8c7f977fa2a586e6cf9e6e71ed2d6d23081633cd9d19c5367
- MD5 c9a9ff57937e7cfe9d793e2162810e59
- SHA1 4138683922c49fc446aac3711567ffafd3fe7650
- SHA512 4db6843c8a4356cfc05bfa87a6151e4ceb9ec4b1af4d41a29f5300be35028d2dda526e91217da1c498398f3d4d07f2734e3b83b9f61b82cb535f692efe4fe615
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
Inquriy.exe
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
Inquriy.exe
Resource
win10v20201028
0 signatures
0 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
smtp.yandex.com
-
Port
587
-
Username
-
Password
vicanto1994
Extracted
Credentials
-
Protocol
smtp
-
Host
smtp.yandex.com
-
Port
587
-
Username
-
Password
vicanto1994
Targets
-
- Target Inquriy.exe
- Size 1.4MB
- SHA256 96e185894358d0c8c7f977fa2a586e6cf9e6e71ed2d6d23081633cd9d19c5367
- MD5 c9a9ff57937e7cfe9d793e2162810e59
- SHA1 4138683922c49fc446aac3711567ffafd3fe7650
- SHA512 4db6843c8a4356cfc05bfa87a6151e4ceb9ec4b1af4d41a29f5300be35028d2dda526e91217da1c498398f3d4d07f2734e3b83b9f61b82cb535f692efe4fe615
- MD5 SHA1 SHA512
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Drops startup file
-
Suspicious use of SetThreadContext