General
- Target URGENT SUPPLY - QUOTE 2020.pdf.exe
- Size 487KB
- Sample201109-g7cwfmf5ea
- SHA256 8c04fcdf35613586ea0643b716c769d7ee4a88af77887ef92d908097adbd6fc4
- MD5 09439f5e5abf5e18c207607e5e33c5f0
- SHA1 4983fe7854af89970ad29df5aa6be5d180ca00a5
- SHA512 25868c74e3b7c98594c1a3978872b2dde2007aed48c9fb1c3fddcec31a40abbbb1b81f02493b6346cf4cbb0d6340e61ee08af50fb8670857ed489270bd5808bb
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
URGENT SUPPLY - QUOTE 2020.pdf.exe
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
URGENT SUPPLY - QUOTE 2020.pdf.exe
Resource
win10v20201028
0 signatures
0 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
mail.oilexindia.com
-
Port
587
-
Username
-
Password
Kamal@2019
Targets
-
- Target URGENT SUPPLY - QUOTE 2020.pdf.exe
- Size 487KB
- SHA256 8c04fcdf35613586ea0643b716c769d7ee4a88af77887ef92d908097adbd6fc4
- MD5 09439f5e5abf5e18c207607e5e33c5f0
- SHA1 4983fe7854af89970ad29df5aa6be5d180ca00a5
- SHA512 25868c74e3b7c98594c1a3978872b2dde2007aed48c9fb1c3fddcec31a40abbbb1b81f02493b6346cf4cbb0d6340e61ee08af50fb8670857ed489270bd5808bb
- MD5 SHA1 SHA512
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Suspicious use of SetThreadContext