General
- Target TNT Consignment Detail_pdf.exe
- Size 269KB
- Sample210602-56bt5shlb2
- SHA256 2907a1c2f6d6f17d63b878f0bcf00360d68ebe320aa90cfa0c829fe7f6747250
- MD5 f39fc76d169d405230915b3551e9bcf0
- SHA1 770f565d290a947d358c182ff7358088df230025
- SHA512 93cda0f58c655a59626d9ce8fda274a8a55fedd005aebe632c1a53b04c2e75fd3993bb03ddcb82324e73c25723779a6590dd516b8dbaae5dfcba32b698baf1fe
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
TNT Consignment Detail_pdf.exe
Resource
win7v20210410
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
TNT Consignment Detail_pdf.exe
Resource
win10v20210408
0 signatures
0 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
gmicaprelam.in
-
Port
587
-
Username
-
Password
chybke2424@
Targets
-
- Target TNT Consignment Detail_pdf.exe
- Size 269KB
- SHA256 2907a1c2f6d6f17d63b878f0bcf00360d68ebe320aa90cfa0c829fe7f6747250
- MD5 f39fc76d169d405230915b3551e9bcf0
- SHA1 770f565d290a947d358c182ff7358088df230025
- SHA512 93cda0f58c655a59626d9ce8fda274a8a55fedd005aebe632c1a53b04c2e75fd3993bb03ddcb82324e73c25723779a6590dd516b8dbaae5dfcba32b698baf1fe
- MD5 SHA1 SHA512
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Loads dropped DLL
-
Suspicious use of SetThreadContext