General
- Target 01158bfc4ce6cb2c5a3cdbf661f13f8b.exe
- Size 634KB
- Sample210408-mdpszqyvm2
- SHA256 4ee443331bdebfdfffa8f7fe75c1434504a900dc792561390f27c3f9f0c8bc09
- MD5 01158bfc4ce6cb2c5a3cdbf661f13f8b
- SHA1 4d18044e5cfa5ebb9b397dd742648db870b1f32a
- SHA512 d07d372e5399fdf8d95117d7d8f33cf3afd75abdc8c7bf812eecb18f73ac25d30e599af11403b9621072435c18db812a1ea0577792345bbf9c9381d0a213b98e
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
01158bfc4ce6cb2c5a3cdbf661f13f8b.exe
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
01158bfc4ce6cb2c5a3cdbf661f13f8b.exe
Resource
win10v20201028
0 signatures
0 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
smtp.yandex.com
-
Port
587
-
Username
-
Password
browse9ja
Targets
-
- Target 01158bfc4ce6cb2c5a3cdbf661f13f8b.exe
- Size 634KB
- SHA256 4ee443331bdebfdfffa8f7fe75c1434504a900dc792561390f27c3f9f0c8bc09
- MD5 01158bfc4ce6cb2c5a3cdbf661f13f8b
- SHA1 4d18044e5cfa5ebb9b397dd742648db870b1f32a
- SHA512 d07d372e5399fdf8d95117d7d8f33cf3afd75abdc8c7bf812eecb18f73ac25d30e599af11403b9621072435c18db812a1ea0577792345bbf9c9381d0a213b98e
- MD5 SHA1 SHA512
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Suspicious use of SetThreadContext