General
- Target cbea798b549e073b22c0ae4f49fd9d82.exe
- Size 668KB
- Sample210322-rxacy6nhen
- SHA256 b2763d0bd70e672d77d8b2e1a78e0c358bc611a2fc27df8dc90e764fc7aaea6d
- MD5 cbea798b549e073b22c0ae4f49fd9d82
- SHA1 d4b1e2ac28cd8470bd315a127cc183dee4e5bfef
- SHA512 1806e0932dffec737e2a30611f4c96accee49abcedc1f958faf48871a2e7e72a458a424988099171d656395a5dbd2bedb99d053f82c45a8adcdd95ea204d61d1
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
cbea798b549e073b22c0ae4f49fd9d82.exe
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
cbea798b549e073b22c0ae4f49fd9d82.exe
Resource
win10v20201028
0 signatures
0 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
mail.privateemail.com
-
Port
587
-
Username
-
Password
Worryless@1234
Targets
-
- Target cbea798b549e073b22c0ae4f49fd9d82.exe
- Size 668KB
- SHA256 b2763d0bd70e672d77d8b2e1a78e0c358bc611a2fc27df8dc90e764fc7aaea6d
- MD5 cbea798b549e073b22c0ae4f49fd9d82
- SHA1 d4b1e2ac28cd8470bd315a127cc183dee4e5bfef
- SHA512 1806e0932dffec737e2a30611f4c96accee49abcedc1f958faf48871a2e7e72a458a424988099171d656395a5dbd2bedb99d053f82c45a8adcdd95ea204d61d1
- MD5 SHA1 SHA512
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Suspicious use of SetThreadContext