General
- Target Order List.exe
- Size 932KB
- Sample210611-c2j5cctb82
- SHA256 7edefe1f7ee89333c843233b07723e43b3ff4e202ef14df8f4db4d40e71b238f
- MD5 2d610e4d27c89e8c2d5665da8bcf6e92
- SHA1 36974165e2cb64f68b63dcd0956a43c66677ccd7
- SHA512 a374905e07c9b89e85c42bbde9ad76ab2bf6215f9daae1004d8c7420775f6c8193d09e976439b09fba0eee9005e15a226de33c6d2a5fd1c7a586872fa63e5b57
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
Order List.exe
Resource
win7v20210410
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
Order List.exe
Resource
win10v20210410
0 signatures
0 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
smtp.yandex.com
-
Port
587
-
Username
-
Password
2021confamation!
Targets
-
- Target Order List.exe
- Size 932KB
- SHA256 7edefe1f7ee89333c843233b07723e43b3ff4e202ef14df8f4db4d40e71b238f
- MD5 2d610e4d27c89e8c2d5665da8bcf6e92
- SHA1 36974165e2cb64f68b63dcd0956a43c66677ccd7
- SHA512 a374905e07c9b89e85c42bbde9ad76ab2bf6215f9daae1004d8c7420775f6c8193d09e976439b09fba0eee9005e15a226de33c6d2a5fd1c7a586872fa63e5b57
- MD5 SHA1 SHA512
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Suspicious use of SetThreadContext