General
- Target DHL Delivery Form.exe
- Size 814KB
- Sample210407-1g3reqwypj
- SHA256 ebd059221fd6663824e281fda56416039f44fcb51d41d323417029f9bd96d73a
- MD5 f02f10e075dc9be2baf23ee856fc8cad
- SHA1 13f3cf93d05720be4f4226c65ff9eb29b1de06d3
- SHA512 3c2a9767e95e29f3761b10e2615eeb3d4f543cce0d2a5457cfe7f271621ffdfd010c01dfe6604de69ecaf956cdcf972a1c53c599a498f6d88b7f29fbdab9ee88
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DHL Delivery Form.exe
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
DHL Delivery Form.exe
Resource
win10v20201028
0 signatures
0 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
server122.web-hosting.com
-
Port
587
-
Username
-
Password
OJZg,yx3yFHQ
Targets
-
- Target DHL Delivery Form.exe
- Size 814KB
- SHA256 ebd059221fd6663824e281fda56416039f44fcb51d41d323417029f9bd96d73a
- MD5 f02f10e075dc9be2baf23ee856fc8cad
- SHA1 13f3cf93d05720be4f4226c65ff9eb29b1de06d3
- SHA512 3c2a9767e95e29f3761b10e2615eeb3d4f543cce0d2a5457cfe7f271621ffdfd010c01dfe6604de69ecaf956cdcf972a1c53c599a498f6d88b7f29fbdab9ee88
- MD5 SHA1 SHA512
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Suspicious use of SetThreadContext