General
- Target Specification.exe
- Size 437KB
- Sample201109-jptdpmxaya
- SHA256 04f3b12cf1303fb88a6200a17bafdf5c8868665cd0fb97ffdcc986a1f66cd0fe
- MD5 8c095e4a32dbed3823d430fab480341c
- SHA1 45205f4d1a09c7a9078a184d4dc0dda2e5ba1343
- SHA512 2f0787f8556a02a54bbe4c8c717acd24f454638451aabc8882190289ec8dd7310be93cbac1c4e52cad2ba79e4516cd1cb46f7914b525a3d56beb62b160af3d27
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
Specification.exe
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
Specification.exe
Resource
win10v20201028
0 signatures
0 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
mail.privateemail.com
-
Port
587
-
Username
-
Password
@damienzy.xyz2240
Targets
-
- Target Specification.exe
- Size 437KB
- SHA256 04f3b12cf1303fb88a6200a17bafdf5c8868665cd0fb97ffdcc986a1f66cd0fe
- MD5 8c095e4a32dbed3823d430fab480341c
- SHA1 45205f4d1a09c7a9078a184d4dc0dda2e5ba1343
- SHA512 2f0787f8556a02a54bbe4c8c717acd24f454638451aabc8882190289ec8dd7310be93cbac1c4e52cad2ba79e4516cd1cb46f7914b525a3d56beb62b160af3d27
- MD5 SHA1 SHA512
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Suspicious use of SetThreadContext