General
- Target revised offer 67843_pdf.exe
- Size 1.2MB
- Sample210601-22ndhjlnca
- SHA256 a7c40e554814f511f8a33265cb7fbcf813e5a57f5bb89e66f9e82a45ebfe5cbc
- MD5 59f3f4ca574fbd1a872cf8e735ae6912
- SHA1 6ce0f95fd1829c0cd290f0ecc944ec3c92abf0a1
- SHA512 a9db5d4fa94393a7dcf997272e5954989475a3a293edaf5b65884100ffbf1f4bcd43af63b61270ace69b385f9e536b03b54f87d247cea32f78192ff35e51633f
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
revised offer 67843_pdf.exe
Resource
win7v20210410
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
revised offer 67843_pdf.exe
Resource
win10v20210410
0 signatures
0 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
smtp.epsllonplastics.com
-
Port
587
-
Username
-
Password
yjzsnb@7
Targets
-
- Target revised offer 67843_pdf.exe
- Size 1.2MB
- SHA256 a7c40e554814f511f8a33265cb7fbcf813e5a57f5bb89e66f9e82a45ebfe5cbc
- MD5 59f3f4ca574fbd1a872cf8e735ae6912
- SHA1 6ce0f95fd1829c0cd290f0ecc944ec3c92abf0a1
- SHA512 a9db5d4fa94393a7dcf997272e5954989475a3a293edaf5b65884100ffbf1f4bcd43af63b61270ace69b385f9e536b03b54f87d247cea32f78192ff35e51633f
- MD5 SHA1 SHA512
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Suspicious use of SetThreadContext