General
- Target Scan 03.06.2021.exe
- Size 906KB
- Sample210603-2se6kbd85n
- SHA256 d649da4d6e45efc5830efb532f63e17004ce49602de831fa98f4137c756c8c1b
- MD5 676cee7794d6bc265b653bc6e1ceedc7
- SHA1 42770f9b9fead71fd2f1f575c1ce3ce61e17c5ff
- SHA512 421269742b2fb395ba63a1697a65230fe2c794564e38fff4ec123a958540870cec3e328045372f4ef8196a7a7e25ec3600467b6a6f243cddb93591ded56ccb23
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
Scan 03.06.2021.exe
Resource
win7v20210410
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
Scan 03.06.2021.exe
Resource
win10v20210410
0 signatures
0 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
smtp.vivaldi.net
-
Port
587
-
Username
-
Password
Grace@331011Thinck
Targets
-
- Target Scan 03.06.2021.exe
- Size 906KB
- SHA256 d649da4d6e45efc5830efb532f63e17004ce49602de831fa98f4137c756c8c1b
- MD5 676cee7794d6bc265b653bc6e1ceedc7
- SHA1 42770f9b9fead71fd2f1f575c1ce3ce61e17c5ff
- SHA512 421269742b2fb395ba63a1697a65230fe2c794564e38fff4ec123a958540870cec3e328045372f4ef8196a7a7e25ec3600467b6a6f243cddb93591ded56ccb23
- MD5 SHA1 SHA512
Score10/10AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
AgentTesla Payload
Suspicious use of SetThreadContext