General
- Target 5195f478_by_Libranalysis
- Size 520KB
- Sample210520-dz6fadk5ls
- SHA256 8c35dc71998561bad15183fe5ce76463fb2651692f72e92cc2d065f69f47b5cd
- MD5 5195f478b106b2b3241f085c7afe205a
- SHA1 be0722cba819da3a1791690fc4585659d0ff8bd9
- SHA512 b95a1d56c0ddbde1f1080d93f5bd1407cb31206edc322a35804826b4e502266c072ee11639d331a1f5300210404e84594411616cf90f19f427eb79ac11cc9ea4
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
5195f478_by_Libranalysis.exe
Resource
win7v20210408
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
5195f478_by_Libranalysis.exe
Resource
win10v20210408
0 signatures
0 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
mail.privateemail.com
-
Port
587
-
Username
-
Password
computer.com
Targets
-
- Target 5195f478_by_Libranalysis
- Size 520KB
- SHA256 8c35dc71998561bad15183fe5ce76463fb2651692f72e92cc2d065f69f47b5cd
- MD5 5195f478b106b2b3241f085c7afe205a
- SHA1 be0722cba819da3a1791690fc4585659d0ff8bd9
- SHA512 b95a1d56c0ddbde1f1080d93f5bd1407cb31206edc322a35804826b4e502266c072ee11639d331a1f5300210404e84594411616cf90f19f427eb79ac11cc9ea4
- MD5 SHA1 SHA512
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Suspicious use of SetThreadContext