General
- Target SecuriteInfo.com.Trojan.Siggen12.31106.9884.27483
- Size 1.2MB
- Sample210309-6exvarkbra
- SHA256 c8b1422e0faff76b67b7cdfe2e9be0ba799522e729aba5cd191b1809740a7fd1
- MD5 ea9484d8058e07b6e2fc474f34021806
- SHA1 3162e57805604645d104267c36c285d466572f37
- SHA512 a0bfd56155f2ce69e782e98d0d4c4cce40ca3cc09974127205058ea5aaa23ac2b4552f9ab3c823419bfddfafc8534640cd8810ca5cf54612985d164e65d888cb
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Trojan.Siggen12.31106.9884.27483.exe
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Trojan.Siggen12.31106.9884.27483.exe
Resource
win10v20201028
0 signatures
0 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
mail.privateemail.com
-
Port
587
-
Username
-
Password
Blessings@12345
Targets
-
- Target SecuriteInfo.com.Trojan.Siggen12.31106.9884.27483
- Size 1.2MB
- SHA256 c8b1422e0faff76b67b7cdfe2e9be0ba799522e729aba5cd191b1809740a7fd1
- MD5 ea9484d8058e07b6e2fc474f34021806
- SHA1 3162e57805604645d104267c36c285d466572f37
- SHA512 a0bfd56155f2ce69e782e98d0d4c4cce40ca3cc09974127205058ea5aaa23ac2b4552f9ab3c823419bfddfafc8534640cd8810ca5cf54612985d164e65d888cb
- MD5 SHA1 SHA512
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Suspicious use of SetThreadContext