General
- Target 8f5603abf955b12d55fe6e763ac4fde3.exe
- Size 959KB
- Sample210325-ldpanf4ewe
- SHA256 2302969f8ff5abb62c46d76a401ee04542ecfdce39eea660d65afefef6d787ce
- MD5 8f5603abf955b12d55fe6e763ac4fde3
- SHA1 6f5d2b98f06f1f8d1a97f7528ecc787102433187
- SHA512 cce70ff01ce1f980f52a1c617f17da513892763d9b272889775615d699e0a9def5bdd6508dabb2d7160d9b90478d67822c705f4efb3a7bf73e5c97dfc2761f67
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
8f5603abf955b12d55fe6e763ac4fde3.exe
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
8f5603abf955b12d55fe6e763ac4fde3.exe
Resource
win10v20201028
0 signatures
0 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
mail.privateemail.com
-
Port
587
-
Username
-
Password
@Mexico1.,
Targets
-
- Target 8f5603abf955b12d55fe6e763ac4fde3.exe
- Size 959KB
- SHA256 2302969f8ff5abb62c46d76a401ee04542ecfdce39eea660d65afefef6d787ce
- MD5 8f5603abf955b12d55fe6e763ac4fde3
- SHA1 6f5d2b98f06f1f8d1a97f7528ecc787102433187
- SHA512 cce70ff01ce1f980f52a1c617f17da513892763d9b272889775615d699e0a9def5bdd6508dabb2d7160d9b90478d67822c705f4efb3a7bf73e5c97dfc2761f67
- MD5 SHA1 SHA512
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Suspicious use of SetThreadContext