General
- Target PO No. SMC -201103-004.exe
- Size 1.0MB
- Sample210820-8f3tezzdna
- SHA256 c147939f30cd87fd5011cbe528c8e34fbdb94b4e478c1a80fb426b18327c1b7c
- MD5 7ccbf16b9366b9a96c7dfaa974e1357d
- SHA1 4aa1195a48373a56b1efdc36257f40d6008a481c
- SHA512 a33c61ecb7f7ea2f3b6e2e77dbca62ae0e47199b6df0a0b229ea2ec95eb2e7272d0fa9458cc7a275efa8eb3af3a58bb95a1cb61e561da57182e26a90e447f1c8
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
PO No. SMC -201103-004.exe
Resource
win7v20210410
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
PO No. SMC -201103-004.exe
Resource
win10v20210410
0 signatures
0 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
mail.tccinfaes.com
-
Port
587
-
Username
-
Password
TccBps1427log
Targets
-
- Target PO No. SMC -201103-004.exe
- Size 1.0MB
- SHA256 c147939f30cd87fd5011cbe528c8e34fbdb94b4e478c1a80fb426b18327c1b7c
- MD5 7ccbf16b9366b9a96c7dfaa974e1357d
- SHA1 4aa1195a48373a56b1efdc36257f40d6008a481c
- SHA512 a33c61ecb7f7ea2f3b6e2e77dbca62ae0e47199b6df0a0b229ea2ec95eb2e7272d0fa9458cc7a275efa8eb3af3a58bb95a1cb61e561da57182e26a90e447f1c8
- MD5 SHA1 SHA512
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Suspicious use of SetThreadContext