General
- Target SecuriteInfo.com.Trojan.GenericKDZ.73184.11258.19381
- Size 523KB
- Sample210226-7wazz4xpvx
- SHA256 a2f1773e4b9146563dbf711ca1462448a7a847f8b6660424f72faaa5fa9b20d4
- MD5 c4242be5efb3c3833c20e3ca293c7375
- SHA1 aa8c78515a6f0043c08b74fe142654ed59da5124
- SHA512 6b11e6706a75175e2890348c9de8464b6989dc2938ed54651a2e08b999b84b50f38f58aaff8730f48117e61cd93840a9352fe66761b55d4ebc9140b9eb27308b
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Trojan.GenericKDZ.73184.11258.19381.exe
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Trojan.GenericKDZ.73184.11258.19381.exe
Resource
win10v20201028
0 signatures
0 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
mail.privateemail.com
-
Port
587
-
Username
-
Password
GODBLESSUS123
Targets
-
- Target SecuriteInfo.com.Trojan.GenericKDZ.73184.11258.19381
- Size 523KB
- SHA256 a2f1773e4b9146563dbf711ca1462448a7a847f8b6660424f72faaa5fa9b20d4
- MD5 c4242be5efb3c3833c20e3ca293c7375
- SHA1 aa8c78515a6f0043c08b74fe142654ed59da5124
- SHA512 6b11e6706a75175e2890348c9de8464b6989dc2938ed54651a2e08b999b84b50f38f58aaff8730f48117e61cd93840a9352fe66761b55d4ebc9140b9eb27308b
- MD5 SHA1 SHA512
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Suspicious use of SetThreadContext