General
- Target a603c13e1af6f8696086aca33ad1140c.exe
- Size 626KB
- Sample210308-6dj4kl696e
- SHA256 f28ee29d6e4f2587b8fb1e2c5c85cabd5f2384973ec9273b9e97a00f2c6080c3
- MD5 a603c13e1af6f8696086aca33ad1140c
- SHA1 12468ddeff12a9cc3196e2acc6c0befa9651ea03
- SHA512 b2c53cfc9244cb86af19c635adcb05cfb31658688602e194be7a1e65c6ee0e1c4b0fdd08aa2e17aff31e1f1b8d91a877cb7f8e82b1fd9f0e005b77db92795f0f
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
a603c13e1af6f8696086aca33ad1140c.exe
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
a603c13e1af6f8696086aca33ad1140c.exe
Resource
win10v20201028
0 signatures
0 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
smtp.yandex.com
-
Port
587
-
Username
-
Password
browse9ja
Targets
-
- Target a603c13e1af6f8696086aca33ad1140c.exe
- Size 626KB
- SHA256 f28ee29d6e4f2587b8fb1e2c5c85cabd5f2384973ec9273b9e97a00f2c6080c3
- MD5 a603c13e1af6f8696086aca33ad1140c
- SHA1 12468ddeff12a9cc3196e2acc6c0befa9651ea03
- SHA512 b2c53cfc9244cb86af19c635adcb05cfb31658688602e194be7a1e65c6ee0e1c4b0fdd08aa2e17aff31e1f1b8d91a877cb7f8e82b1fd9f0e005b77db92795f0f
- MD5 SHA1 SHA512
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Suspicious use of SetThreadContext