General
- Target SOA.exe
- Size 580KB
- Sample210319-ff7m3pl2n2
- SHA256 b53452ceb042eda660c8caf32d410df482b58ef7818bcd013036f54ef4c3be84
- MD5 feb990f2eb7a1b9abbbe4a78ff1687f2
- SHA1 6fcf283702bea9b0ba8d0ea25df9540af4c24f23
- SHA512 502921b66d71b64f56b0845f6174269270e23d2a82666cdac574933d3431405d24a050c7a5de8cd5334808b4443dbd73e9c05c35bb220220b9103480c7b664e0
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
SOA.exe
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
SOA.exe
Resource
win10v20201028
0 signatures
0 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
smtp.vivaldi.net
-
Port
587
-
Username
-
Password
Qwerty2020Hp##
Targets
-
- Target SOA.exe
- Size 580KB
- SHA256 b53452ceb042eda660c8caf32d410df482b58ef7818bcd013036f54ef4c3be84
- MD5 feb990f2eb7a1b9abbbe4a78ff1687f2
- SHA1 6fcf283702bea9b0ba8d0ea25df9540af4c24f23
- SHA512 502921b66d71b64f56b0845f6174269270e23d2a82666cdac574933d3431405d24a050c7a5de8cd5334808b4443dbd73e9c05c35bb220220b9103480c7b664e0
- MD5 SHA1 SHA512
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Suspicious use of SetThreadContext