General
- Target 4d8903ccb1d29a139177913312c3030c.exe
- Size 540KB
- Sample210410-9dmdmgv51e
- SHA256 6dc8a34aece4d4250886f68c18a406e216a82886e2e34d8d8c6983bb9989591d
- MD5 4d8903ccb1d29a139177913312c3030c
- SHA1 5742ba48287969ff4ba8add680314f002514b3b2
- SHA512 ef9411567dedda53681bc61d20124f174e01ff9f62662b825703bd603db1fb9b2221a02e627ef1fdfddcd9759293f8b23fd0b14e933ff7b046fe363310ed51c6
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
4d8903ccb1d29a139177913312c3030c.exe
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
4d8903ccb1d29a139177913312c3030c.exe
Resource
win10v20201028
0 signatures
0 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
smtp.yandex.com
-
Port
587
-
Username
-
Password
browse9ja
Targets
-
- Target 4d8903ccb1d29a139177913312c3030c.exe
- Size 540KB
- SHA256 6dc8a34aece4d4250886f68c18a406e216a82886e2e34d8d8c6983bb9989591d
- MD5 4d8903ccb1d29a139177913312c3030c
- SHA1 5742ba48287969ff4ba8add680314f002514b3b2
- SHA512 ef9411567dedda53681bc61d20124f174e01ff9f62662b825703bd603db1fb9b2221a02e627ef1fdfddcd9759293f8b23fd0b14e933ff7b046fe363310ed51c6
- MD5 SHA1 SHA512
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Suspicious use of SetThreadContext