General
- Target documents..exe
- Size 771KB
- Sample210319-3tpd1xmfx2
- SHA256 5dd92be22d005624d865ddf07402eb852426fc97baa52bbc58316690d41adb74
- MD5 e4688bf04465c2b33cc6bd0acdf20ff7
- SHA1 0a29d3b4703563504e6944c7043e22f9b0a742ae
- SHA512 31b3123d46ca3744fe4c0ac62e612c5d018005ae2bdc7abf80b2a85b14b5ad71be9b976da09dfac182368c6f3ffdb8b06c0f1d08ea3598a147d88578c3a114a6
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
documents..exe
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
documents..exe
Resource
win10v20201028
0 signatures
0 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
ftp
-
Host
ftp://files.000webhost.com/
-
Port
21
-
Username
zinco
-
Password
computer147
Targets
-
- Target documents..exe
- Size 771KB
- SHA256 5dd92be22d005624d865ddf07402eb852426fc97baa52bbc58316690d41adb74
- MD5 e4688bf04465c2b33cc6bd0acdf20ff7
- SHA1 0a29d3b4703563504e6944c7043e22f9b0a742ae
- SHA512 31b3123d46ca3744fe4c0ac62e612c5d018005ae2bdc7abf80b2a85b14b5ad71be9b976da09dfac182368c6f3ffdb8b06c0f1d08ea3598a147d88578c3a114a6
- MD5 SHA1 SHA512
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Suspicious use of SetThreadContext