General
- Target Bank Details.exe
- Size 841KB
- Sample210408-731bs8c4a6
- SHA256 9e06dbc31da0f0538f26c66ccb165bab4ae9107794e62b0f9047e50866e2d183
- MD5 54ff3faefd69018f97f5e8daff8cf153
- SHA1 62fa9f5929c5a7d4165914fe0a0e5ad3ca696b5f
- SHA512 30215298a177a2e00afe07a7c0533ab6ec24b3dc33742766e3af8676c8e11bd3b40855a8dcb541b139fd7cdf77d53fb345b5318e0e2c94920765e2648a000263
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
Bank Details.exe
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
Bank Details.exe
Resource
win10v20201028
0 signatures
0 seconds
Malware Config
Extracted
Family
-
agenttesla
C2
-
https://api.telegram.org/bot1696339592:AAGbaDjD3IHi9kBkuqadzmBZMoM8jpnGAUI/sendDocument
Targets
-
- Target Bank Details.exe
- Size 841KB
- SHA256 9e06dbc31da0f0538f26c66ccb165bab4ae9107794e62b0f9047e50866e2d183
- MD5 54ff3faefd69018f97f5e8daff8cf153
- SHA1 62fa9f5929c5a7d4165914fe0a0e5ad3ca696b5f
- SHA512 30215298a177a2e00afe07a7c0533ab6ec24b3dc33742766e3af8676c8e11bd3b40855a8dcb541b139fd7cdf77d53fb345b5318e0e2c94920765e2648a000263
- MD5 SHA1 SHA512
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Suspicious use of SetThreadContext