General
- Target SecuriteInfo.com.Trojan.PackedNET.671.29618.22878
- Size 920KB
- Sample210420-83xtcfdwca
- SHA256 6f14396f619147aaa06487cdb10f71df3e7bf0da19aebe34aacc8b0b2b176d4f
- MD5 a61ba5dbcfff42f3decf75813a97e4d0
- SHA1 0289bba4983002989fc29e5b26d14a99e79a314f
- SHA512 418fa5fd6f1cb4789a6a8f54044dce3d9969bc188baee3db435b6285ecfc5e02919bfa7d812f813b88b7bd2d65ae92421299e26c7f4bdc7b5878437f71dc0d45
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Trojan.PackedNET.671.29618.22878.exe
Resource
win7v20210410
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Trojan.PackedNET.671.29618.22878.exe
Resource
win10v20210408
0 signatures
0 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
mail.privateemail.com
-
Port
587
-
Username
-
Password
@Mexico1.,
Targets
-
- Target SecuriteInfo.com.Trojan.PackedNET.671.29618.22878
- Size 920KB
- SHA256 6f14396f619147aaa06487cdb10f71df3e7bf0da19aebe34aacc8b0b2b176d4f
- MD5 a61ba5dbcfff42f3decf75813a97e4d0
- SHA1 0289bba4983002989fc29e5b26d14a99e79a314f
- SHA512 418fa5fd6f1cb4789a6a8f54044dce3d9969bc188baee3db435b6285ecfc5e02919bfa7d812f813b88b7bd2d65ae92421299e26c7f4bdc7b5878437f71dc0d45
- MD5 SHA1 SHA512
Score10/10AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
AgentTesla Payload
Suspicious use of SetThreadContext