General
- Target SecuriteInfo.com.Trojan.PackedNET.576.12750.21331
- Size 773KB
- Sample210331-pntqtkkrbx
- SHA256 17a08f17e69c29763d0e6e6758da98d34c724c5918cbf3e3fa4539b4a4876bc9
- MD5 26be1be0b91d39f0d34d57a186e050f3
- SHA1 abef9f16c9a80e1ada2e8fec590e1b8f84a08523
- SHA512 2a516ee05e4e1c83bb7db9cf4b3e1d4c9a0f4a6388127cc1aeffb412cda3308b00deb9c065027c6581d9b69f27167ba121f041e056927025f0bf905a5fd918e2
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Trojan.PackedNET.576.12750.21331.exe
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Trojan.PackedNET.576.12750.21331.exe
Resource
win10v20201028
0 signatures
0 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
smtp.yandex.com
-
Port
587
-
Username
-
Password
browse9ja
Targets
-
- Target SecuriteInfo.com.Trojan.PackedNET.576.12750.21331
- Size 773KB
- SHA256 17a08f17e69c29763d0e6e6758da98d34c724c5918cbf3e3fa4539b4a4876bc9
- MD5 26be1be0b91d39f0d34d57a186e050f3
- SHA1 abef9f16c9a80e1ada2e8fec590e1b8f84a08523
- SHA512 2a516ee05e4e1c83bb7db9cf4b3e1d4c9a0f4a6388127cc1aeffb412cda3308b00deb9c065027c6581d9b69f27167ba121f041e056927025f0bf905a5fd918e2
- MD5 SHA1 SHA512
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Suspicious use of SetThreadContext