General
- Target SecuriteInfo.com.Artemis03A9CA30E3F8.31273.19745
- Size 729KB
- Sample210311-vmf2mtv8es
- SHA256 a8fff516d9fd0acae0f2e6809dfa1d719b1257dcd09e9378f411c8685c77a3f5
- MD5 03a9ca30e3f8bdf6803bc1b699dd3564
- SHA1 1383a691ac9df07f2301c3ce5f92ace27cf10ccd
- SHA512 68bb4727df0d678e8bff1849920557ade209cb27d5fd4787b110afb35c713e0fa4a0dccf0871fb40a345d99ad46477d837eb1cae5725a899e2a9e1e818574bda
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Artemis03A9CA30E3F8.31273.19745.exe
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Artemis03A9CA30E3F8.31273.19745.exe
Resource
win10v20201028
0 signatures
0 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
barclays247.com
-
Port
587
-
Username
-
Password
kenny@12345
Targets
-
- Target SecuriteInfo.com.Artemis03A9CA30E3F8.31273.19745
- Size 729KB
- SHA256 a8fff516d9fd0acae0f2e6809dfa1d719b1257dcd09e9378f411c8685c77a3f5
- MD5 03a9ca30e3f8bdf6803bc1b699dd3564
- SHA1 1383a691ac9df07f2301c3ce5f92ace27cf10ccd
- SHA512 68bb4727df0d678e8bff1849920557ade209cb27d5fd4787b110afb35c713e0fa4a0dccf0871fb40a345d99ad46477d837eb1cae5725a899e2a9e1e818574bda
- MD5 SHA1 SHA512
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Suspicious use of SetThreadContext