General
- Target a61d3f2a7db58fdb8aa4efdff483075a.exe
- Size 1.0MB
- Sample210526-a8ec3jpsma
- SHA256 fb8bc20c5ad0dbeedd5c90d8fa5e9bd7e0ff71fe75c7ebd51559b0599699281e
- MD5 a61d3f2a7db58fdb8aa4efdff483075a
- SHA1 da2e43f650ac490118cfaedca1ec98a4b0acbe6a
- SHA512 b5f094bdb11ca570fd19495e6207af32ad019f1ab52b8321bb66e3f09ff0a0c2c5730dac944a57a98a3671f08a3c62ddff1225ecb33680cc361787e99f22ef9e
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
a61d3f2a7db58fdb8aa4efdff483075a.exe
Resource
win7v20210410
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
a61d3f2a7db58fdb8aa4efdff483075a.exe
Resource
win10v20210408
0 signatures
0 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
smtp.globalescrowtrust.com
-
Port
587
-
Username
-
Password
company1960
Targets
-
- Target a61d3f2a7db58fdb8aa4efdff483075a.exe
- Size 1.0MB
- SHA256 fb8bc20c5ad0dbeedd5c90d8fa5e9bd7e0ff71fe75c7ebd51559b0599699281e
- MD5 a61d3f2a7db58fdb8aa4efdff483075a
- SHA1 da2e43f650ac490118cfaedca1ec98a4b0acbe6a
- SHA512 b5f094bdb11ca570fd19495e6207af32ad019f1ab52b8321bb66e3f09ff0a0c2c5730dac944a57a98a3671f08a3c62ddff1225ecb33680cc361787e99f22ef9e
- MD5 SHA1 SHA512
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Suspicious use of SetThreadContext