General
- Target 786f84dc31f801a33ccf031ba8ac9af9.exe
- Size 745KB
- Sample210503-mkabxb725e
- SHA256 5d76a173559f80d48cdd566e29eca3f8b04e6b58b0cb9859360c994a3ec70ea2
- MD5 786f84dc31f801a33ccf031ba8ac9af9
- SHA1 4d4e9042d3b4bda199a50d76545ec3eac5d48522
- SHA512 cedd393165f763a454df53c2bdeabc3c563b4e306a3f4c933d963a0a220351f8bf62f8845ecc759f4e91b12cf7eb37b5ab09ceb0d1f1f894e8d09260c97f706b
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
786f84dc31f801a33ccf031ba8ac9af9.exe
Resource
win7v20210408
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
786f84dc31f801a33ccf031ba8ac9af9.exe
Resource
win10v20210410
0 signatures
0 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
smtp.nilkarnal.com
-
Port
587
-
Username
-
Password
company1960
Targets
-
- Target 786f84dc31f801a33ccf031ba8ac9af9.exe
- Size 745KB
- SHA256 5d76a173559f80d48cdd566e29eca3f8b04e6b58b0cb9859360c994a3ec70ea2
- MD5 786f84dc31f801a33ccf031ba8ac9af9
- SHA1 4d4e9042d3b4bda199a50d76545ec3eac5d48522
- SHA512 cedd393165f763a454df53c2bdeabc3c563b4e306a3f4c933d963a0a220351f8bf62f8845ecc759f4e91b12cf7eb37b5ab09ceb0d1f1f894e8d09260c97f706b
- MD5 SHA1 SHA512
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Suspicious use of SetThreadContext