General
- Target Bartz Maschinenbau GmbH TOP QUOTATION RFQ 2020.pdf.exe
- Size 532KB
- Sample201109-f3qa69mrb2
- SHA256 be797451eb7e33433e8af31a585f95e3167c43097eaf009d5dc533dfd92f43e6
- MD5 5aa35364720a7a20ba95cb2267f7500f
- SHA1 4d822d99ea75c109089cf6e33debdc84538f5af8
- SHA512 9275c6e9546cb974bec9cfcbaf34d83a1fc3152c1a84fca604bf3e3b3636c1ae0ebaade3f880fc4e28bb418ad0eb88edb79720cbc85fcebecaa3176cbd4b593b
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
Bartz Maschinenbau GmbH TOP QUOTATION RFQ 2020.pdf.exe
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
Bartz Maschinenbau GmbH TOP QUOTATION RFQ 2020.pdf.exe
Resource
win10v20201028
0 signatures
0 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
mail.oilexindia.com
-
Port
587
-
Username
-
Password
Kamal@2019
Extracted
Credentials
-
Protocol
smtp
-
Host
mail.oilexindia.com
-
Port
587
-
Username
-
Password
Kamal@2019
Targets
-
- Target Bartz Maschinenbau GmbH TOP QUOTATION RFQ 2020.pdf.exe
- Size 532KB
- SHA256 be797451eb7e33433e8af31a585f95e3167c43097eaf009d5dc533dfd92f43e6
- MD5 5aa35364720a7a20ba95cb2267f7500f
- SHA1 4d822d99ea75c109089cf6e33debdc84538f5af8
- SHA512 9275c6e9546cb974bec9cfcbaf34d83a1fc3152c1a84fca604bf3e3b3636c1ae0ebaade3f880fc4e28bb418ad0eb88edb79720cbc85fcebecaa3176cbd4b593b
- MD5 SHA1 SHA512
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Suspicious use of SetThreadContext