General
- Target CAS No. 9004-65-3.scr
- Size 1.5MB
- Sample210607-ffbj7vv41s
- SHA256 92249587f4034051ca019922a388b659536fad1cbbba9f2bdfd872867741041d
- MD5 dcb2900126d16cb5e5d382343b8363ee
- SHA1 38a2621f72e44a8783a5a04f882c440ad02b8f75
- SHA512 dd0f03686690f3b9f7f0ee719bb41f58966e4360e7a95c8164e16fe013996e896304be394320cc72b5f6904750b12b4a4fa740312177eb4d384b70e41b8bf58e
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
CAS No. 9004-65-3.scr
Resource
win7v20210408
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
CAS No. 9004-65-3.scr
Resource
win10v20210410
0 signatures
0 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
mail.w2opt.com
-
Port
587
-
Username
-
Password
wTwo@2018
Targets
-
- Target CAS No. 9004-65-3.scr
- Size 1.5MB
- SHA256 92249587f4034051ca019922a388b659536fad1cbbba9f2bdfd872867741041d
- MD5 dcb2900126d16cb5e5d382343b8363ee
- SHA1 38a2621f72e44a8783a5a04f882c440ad02b8f75
- SHA512 dd0f03686690f3b9f7f0ee719bb41f58966e4360e7a95c8164e16fe013996e896304be394320cc72b5f6904750b12b4a4fa740312177eb4d384b70e41b8bf58e
- MD5 SHA1 SHA512
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Suspicious use of SetThreadContext