General
- Target Complaint About Your Company.exe
- Size 820KB
- Sample210226-dyjsh9ehta
- SHA256 6d84f67c5ce01feb377d1e1bb8959251aac2e23fac027029e7d3a8548a3300a5
- MD5 ad8e516a03685e3bbf2cfde99b0a06a9
- SHA1 913240ddb22665b0e244cc69eb22aaa8fc3d49f5
- SHA512 eb5dc5763722192f4f0d913bc1d77869470e56b1592c3de9a91ddcf4af8a68373aa1877d5a9a01421f0ba2766266cd8a1e15e7abda14bad912be6ebe1a30b311
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
Complaint About Your Company.exe
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
Complaint About Your Company.exe
Resource
win10v20201028
0 signatures
0 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
ftp
-
Host
ftp://files.000webhost.com/
-
Port
21
-
Username
zinco
-
Password
computer147
Targets
-
- Target Complaint About Your Company.exe
- Size 820KB
- SHA256 6d84f67c5ce01feb377d1e1bb8959251aac2e23fac027029e7d3a8548a3300a5
- MD5 ad8e516a03685e3bbf2cfde99b0a06a9
- SHA1 913240ddb22665b0e244cc69eb22aaa8fc3d49f5
- SHA512 eb5dc5763722192f4f0d913bc1d77869470e56b1592c3de9a91ddcf4af8a68373aa1877d5a9a01421f0ba2766266cd8a1e15e7abda14bad912be6ebe1a30b311
- MD5 SHA1 SHA512
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Suspicious use of SetThreadContext