General
- Target DHL Documents.exe
- Size 997KB
- Sample210602-bav5e2rdma
- SHA256 d6f1e607be28e2f2a6af69dd4a3470831cc40afdbf408c20ce41c71c9e373fa0
- MD5 cf9e98ca56b45a5504184406941f3192
- SHA1 b958bb432317be71fd7f8a5d6267db8ec416b27f
- SHA512 5081e7812a0e9cc4a896769099d682b16decad8bf252bb57b82f6be867db797bbedd4ccfa129f331f99bd56633848803796c1162791661776d523ef9388821a0
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DHL Documents.exe
Resource
win7v20210408
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
DHL Documents.exe
Resource
win10v20210410
0 signatures
0 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
smtp.titan.email
-
Port
587
-
Username
-
Password
mmm777
Targets
-
- Target DHL Documents.exe
- Size 997KB
- SHA256 d6f1e607be28e2f2a6af69dd4a3470831cc40afdbf408c20ce41c71c9e373fa0
- MD5 cf9e98ca56b45a5504184406941f3192
- SHA1 b958bb432317be71fd7f8a5d6267db8ec416b27f
- SHA512 5081e7812a0e9cc4a896769099d682b16decad8bf252bb57b82f6be867db797bbedd4ccfa129f331f99bd56633848803796c1162791661776d523ef9388821a0
- MD5 SHA1 SHA512
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Suspicious use of SetThreadContext