General
- Target a29303f9b744d67a80643cc0b5d07a73.exe
- Size 802KB
- Sample210331-73x6gmsnsn
- SHA256 acc4f3dec5d471c28db29b9e7877fa419d157ebaa44b51039fbae33d6e33ca02
- MD5 a29303f9b744d67a80643cc0b5d07a73
- SHA1 65223c839671f35951ea7d46afa51d42d1f5a3bb
- SHA512 d63522dc7b03e9a18cb88ba44001f55e6377bdfd7c5449b86f7b2bc3b76b2debd7e2efdce5c87b912083d6a68a7ab5fbe14126f9a6b4bb2e7d330ea0e057b02a
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
a29303f9b744d67a80643cc0b5d07a73.exe
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
a29303f9b744d67a80643cc0b5d07a73.exe
Resource
win10v20201028
0 signatures
0 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
webmail.1300dentrepair.com.au
-
Port
587
-
Username
-
Password
money123@@@
Targets
-
- Target a29303f9b744d67a80643cc0b5d07a73.exe
- Size 802KB
- SHA256 acc4f3dec5d471c28db29b9e7877fa419d157ebaa44b51039fbae33d6e33ca02
- MD5 a29303f9b744d67a80643cc0b5d07a73
- SHA1 65223c839671f35951ea7d46afa51d42d1f5a3bb
- SHA512 d63522dc7b03e9a18cb88ba44001f55e6377bdfd7c5449b86f7b2bc3b76b2debd7e2efdce5c87b912083d6a68a7ab5fbe14126f9a6b4bb2e7d330ea0e057b02a
- MD5 SHA1 SHA512
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Suspicious use of SetThreadContext