General
- Target Naukri Messages Alert.exe
- Size 722KB
- Sample210503-vj3hfeflba
- SHA256 d58e787295f373239d4f6a4baeff4ab54b4d04dfb0e046f1329d565e55ed6206
- MD5 1659a042d7b8e14b4605a0990011cabe
- SHA1 972f0170b10c9295d8b3598c6ee1510b09737c01
- SHA512 faf4e21ea0524ebe950de152423b4c74b2ef2fb6571eed35582c16fd0c7b0cc0e0e5498f6e2ba105020a75dc0d1b3feb3d9b528f383fe7c5edd1a2b999e85552
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
Naukri Messages Alert.exe
Resource
win7v20210410
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
Naukri Messages Alert.exe
Resource
win10v20210410
0 signatures
0 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
ftp
-
Host
ftp://files.000webhost.com/
-
Port
21
-
Username
zinco
-
Password
computer147
Targets
-
- Target Naukri Messages Alert.exe
- Size 722KB
- SHA256 d58e787295f373239d4f6a4baeff4ab54b4d04dfb0e046f1329d565e55ed6206
- MD5 1659a042d7b8e14b4605a0990011cabe
- SHA1 972f0170b10c9295d8b3598c6ee1510b09737c01
- SHA512 faf4e21ea0524ebe950de152423b4c74b2ef2fb6571eed35582c16fd0c7b0cc0e0e5498f6e2ba105020a75dc0d1b3feb3d9b528f383fe7c5edd1a2b999e85552
- MD5 SHA1 SHA512
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Suspicious use of SetThreadContext