General
- Target TT (Ref 0765648475).rar
- Size 690KB
- Sample210514-73fg6flm72
- SHA256 3dced7b201ad71f1c1de4db62df1fbe6105e29bbb82b5cb54b3bae363343d128
- MD5 7f85f7be3af4218cf782aef85bb8a16f
- SHA1 300dd7d22e77d500b32860a879bdab6af56f9bf1
- SHA512 2bbc8983ba45b945b0ccd0d6f250b527178a08430744795c5452794653a6de6d28f1b4a067086598889d463d392bb43bd3ef386b1c5c950c4c92e2750b4b15db
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
TT (Ref 0765648475).exe
Resource
win7v20210408
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
TT (Ref 0765648475).exe
Resource
win10v20210410
0 signatures
0 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
us2.smtp.mailhostbox.com
-
Port
587
-
Username
-
Password
babafresh@2125
Targets
-
- Target TT (Ref 0765648475).exe
- Size 1.8MB
- SHA256 856c3abba6de3f00378613cc67649350a6e9b1867d8f2edede21e5b73d4da01e
- MD5 4bcafee2aa74055fde7370993e02402d
- SHA1 545ab5761aa3ed2ce5ea1fafed7dfd20e66cf729
- SHA512 30e3f4fe07bf5bae0b3fcf3519173b411cd65b080de524ad1c06cd79025ed602f8930ddd64d1094fc331a00c2435ddb9edab38d715797ff7e390e5987edd4b1b
- MD5 SHA1 SHA512
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Suspicious use of SetThreadContext