General
- Target Item_Delivery_Details_000422865.exe
- Size 1.2MB
- Sample210531-7j93pasdkj
- SHA256 4fe121b1cd0a1558b75fd3f63f13e58ba7165b556a1b21115a007ff18828fe33
- MD5 626f2c24e8251b9294fa76f6bd6c7176
- SHA1 e02218d5f30d7b91b42f963e12b342b98cdcbcd0
- SHA512 a33454d973bc9fbb61f33d638755671c3e45990e9cade838f3b7b262e9a04e8f2704f1be04fd16e78b275e3c721b02be681285e9fddf522e044b030df12bacc9
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
Item_Delivery_Details_000422865.exe
Resource
win7v20210410
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
Item_Delivery_Details_000422865.exe
Resource
win10v20210410
0 signatures
0 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
us2.smtp.mailhostbox.com
-
Port
587
-
Username
-
Password
Human101
Targets
-
- Target Item_Delivery_Details_000422865.exe
- Size 1.2MB
- SHA256 4fe121b1cd0a1558b75fd3f63f13e58ba7165b556a1b21115a007ff18828fe33
- MD5 626f2c24e8251b9294fa76f6bd6c7176
- SHA1 e02218d5f30d7b91b42f963e12b342b98cdcbcd0
- SHA512 a33454d973bc9fbb61f33d638755671c3e45990e9cade838f3b7b262e9a04e8f2704f1be04fd16e78b275e3c721b02be681285e9fddf522e044b030df12bacc9
- MD5 SHA1 SHA512
Score10/10AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
AgentTesla Payload
Suspicious use of SetThreadContext