General
- Target 7bb6c716a6119de0949bd18feabf492d.exe
- Size 1.0MB
- Sample210426-1j15jb7dp2
- SHA256 075d98e62c3f5fcbff5c865c72ca862087052e56f0bca4d564595be759f5f2cd
- MD5 7bb6c716a6119de0949bd18feabf492d
- SHA1 0acf48bfa3e137c59adfc5f3565c2bdcb071c645
- SHA512 54d0c32c434c476790d53fef1c35b74ffffc9f5cb2eb83165fddfebb7949fb14b638933b678cba156405e017db5dccbc79eca030020d157cfe0f2419add04184
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
7bb6c716a6119de0949bd18feabf492d.exe
Resource
win7v20210410
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
7bb6c716a6119de0949bd18feabf492d.exe
Resource
win10v20210408
0 signatures
0 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
mail.privateemail.com
-
Port
587
-
Username
-
Password
ONLYGODBLESSING123
Targets
-
- Target 7bb6c716a6119de0949bd18feabf492d.exe
- Size 1.0MB
- SHA256 075d98e62c3f5fcbff5c865c72ca862087052e56f0bca4d564595be759f5f2cd
- MD5 7bb6c716a6119de0949bd18feabf492d
- SHA1 0acf48bfa3e137c59adfc5f3565c2bdcb071c645
- SHA512 54d0c32c434c476790d53fef1c35b74ffffc9f5cb2eb83165fddfebb7949fb14b638933b678cba156405e017db5dccbc79eca030020d157cfe0f2419add04184
- MD5 SHA1 SHA512
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Suspicious use of SetThreadContext