General
- Target bba11f81794c3a2574e680976c6b8e54.exe
- Size 653KB
- Sample210331-qmrvrl6r5e
- SHA256 4bbc025849f8996952c998d7658df3dc8d70ceafb8dbdb22d55e94b2abe00d81
- MD5 bba11f81794c3a2574e680976c6b8e54
- SHA1 084c2068d4770be406fb713f176948563650f757
- SHA512 f2681d0e133149eb49bdf0f120a61b5fb14beb9f3db07ea5819c1da80d810b48e50ebf530bcb690788ea782c9f452ff76ccb43675a37fe24c32bf15d526da686
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
bba11f81794c3a2574e680976c6b8e54.exe
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
bba11f81794c3a2574e680976c6b8e54.exe
Resource
win10v20201028
0 signatures
0 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
smtp.yandex.com
-
Port
587
-
Username
-
Password
browse9ja
Targets
-
- Target bba11f81794c3a2574e680976c6b8e54.exe
- Size 653KB
- SHA256 4bbc025849f8996952c998d7658df3dc8d70ceafb8dbdb22d55e94b2abe00d81
- MD5 bba11f81794c3a2574e680976c6b8e54
- SHA1 084c2068d4770be406fb713f176948563650f757
- SHA512 f2681d0e133149eb49bdf0f120a61b5fb14beb9f3db07ea5819c1da80d810b48e50ebf530bcb690788ea782c9f452ff76ccb43675a37fe24c32bf15d526da686
- MD5 SHA1 SHA512
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Suspicious use of SetThreadContext