General
- Target MASTER CONTACT DETAILS.rar
- Size 416KB
- Sample210608-7vbkp7ghja
- SHA256 9b535df4412e9df0e5e9b1a76f64a2f977ec3ab8a59abcc77dbd95e562012992
- MD5 97ee77d34e27fc891934d0ceda085a29
- SHA1 2128d01c7e3a073262ea097792a9b2e6ea94673b
- SHA512 7f4d19fce820e4d302c917dddc7091c13253496d19c74f183d1bc6572ab8737e6da187b6cae7c9b95d96bb12de2567801c69c8f34437889520c6043fc1fb0b47
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
MASTER CONTACT DETAILS.exe
Resource
win7v20210410
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
MASTER CONTACT DETAILS.exe
Resource
win10v20210410
0 signatures
0 seconds
Malware Config
Extracted
Family
-
agenttesla
C2
-
https://api.telegram.org/bot1765743101:AAFjAIqoiFu5pUMytacYpCrgIdiSe6mbRkM/sendDocument
Targets
-
- Target MASTER CONTACT DETAILS.exe
- Size 830KB
- SHA256 4b78575b143ad3445c37789bbb9fcfc5d1abf7a788eeb09dd6cee6df3c8984af
- MD5 79f02aae4b266ed15cac2a9f159f1948
- SHA1 608592e5241179dee88689a2b60b562c3686ac4f
- SHA512 c537892589952dcf7c3eb0c32ac87e39bb3edf2e3be15e611651a585b640e3b0903f875b45cca0daa679aed12c3099ea04ca8697d28a72f98f556175a136de98
- MD5 SHA1 SHA512
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Suspicious use of SetThreadContext