General
-
Target
URGENT REQUEST FOR QUOTATION.exe
-
Size
800KB
-
Sample
210727-a9p5rc9tzx
-
MD5
9343f031d3ab03e202698b5e5f7a71c7
-
SHA1
8648f8babd986618c21185705f365df9705b6c49
-
SHA256
e7cbb9f2862c31495bedaea4648d8e76e5594c03b648ab5185129a69f6b2bc5d
-
SHA512
4c920ff64db2c67537855cb10ba7a33eb8d1cd4b35aa0205965cd936b9958dd04838347e1230422f78a2aa4b0dcc57fefbf2579dd3b3fc9de028d96af54d59b5
Static task
static1
Behavioral task
behavioral1
Sample
URGENT REQUEST FOR QUOTATION.exe
Resource
win7v20210408
Behavioral task
behavioral2
Sample
URGENT REQUEST FOR QUOTATION.exe
Resource
win10v20210410
Malware Config
Extracted
agenttesla
Protocol: smtp- Host:
smtp.vivaldi.net - Port:
587 - Username:
brucechuks212@vivaldi.net - Password:
23456789@@@@
Targets
-
-
Target
URGENT REQUEST FOR QUOTATION.exe
-
Size
800KB
-
MD5
9343f031d3ab03e202698b5e5f7a71c7
-
SHA1
8648f8babd986618c21185705f365df9705b6c49
-
SHA256
e7cbb9f2862c31495bedaea4648d8e76e5594c03b648ab5185129a69f6b2bc5d
-
SHA512
4c920ff64db2c67537855cb10ba7a33eb8d1cd4b35aa0205965cd936b9958dd04838347e1230422f78a2aa4b0dcc57fefbf2579dd3b3fc9de028d96af54d59b5
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Suspicious use of SetThreadContext
-