General
- Target c6b4f3ee78233d773c9d4b774a853ef7.exe
- Size 849KB
- Sample210307-vfd55s3xe6
- SHA256 cba011ff738721f548b90c2297b21da4e3292ddd215dbce5a1b5df3371e8dadd
- MD5 c6b4f3ee78233d773c9d4b774a853ef7
- SHA1 5d21215945e383f312f60d2b07e63abc2ed4265a
- SHA512 fe6a1096520eb714f7a42c71eea78f0d1421e44deb0da79c4ca816c7579d29a3f6e759c38cc6fac7f6b423bde2b3b236dba03dd6207ed77cafc181bb47dc9da0
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
c6b4f3ee78233d773c9d4b774a853ef7.exe
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
c6b4f3ee78233d773c9d4b774a853ef7.exe
Resource
win10v20201028
0 signatures
0 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
smtp.yandex.com
-
Port
587
-
Username
-
Password
browse9ja
Targets
-
- Target c6b4f3ee78233d773c9d4b774a853ef7.exe
- Size 849KB
- SHA256 cba011ff738721f548b90c2297b21da4e3292ddd215dbce5a1b5df3371e8dadd
- MD5 c6b4f3ee78233d773c9d4b774a853ef7
- SHA1 5d21215945e383f312f60d2b07e63abc2ed4265a
- SHA512 fe6a1096520eb714f7a42c71eea78f0d1421e44deb0da79c4ca816c7579d29a3f6e759c38cc6fac7f6b423bde2b3b236dba03dd6207ed77cafc181bb47dc9da0
- MD5 SHA1 SHA512
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Suspicious use of SetThreadContext