General
- Target INDIAN FARIDA ED23E23E.exe
- Size 837KB
- Sample210831-t7ld9fpr6j
- SHA256 b196d74012b2af1b9e67fc11dd4b85d3010bc7ef892c7232fa9228bb0d38972c
- MD5 8436bdcbf21792822abc9e7cd3e0465d
- SHA1 2c515dcd24b825cd4ae16a95ae8658516e4934a9
- SHA512 ee32344b03631239b57b8db7a16a8a15087603f1cc5d98ae6939496374d323b24ac06bfabee4382ee1b6d0d64ec299d18af8cb4c411fc804062c0813e630c50b
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
INDIAN FARIDA ED23E23E.exe
Resource
win7v20210408
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
INDIAN FARIDA ED23E23E.exe
Resource
win10v20210408
0 signatures
0 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
mail.scriptcopy.org
-
Port
587
-
Username
-
Password
t%K@flX5~T45
Targets
-
- Target INDIAN FARIDA ED23E23E.exe
- Size 837KB
- SHA256 b196d74012b2af1b9e67fc11dd4b85d3010bc7ef892c7232fa9228bb0d38972c
- MD5 8436bdcbf21792822abc9e7cd3e0465d
- SHA1 2c515dcd24b825cd4ae16a95ae8658516e4934a9
- SHA512 ee32344b03631239b57b8db7a16a8a15087603f1cc5d98ae6939496374d323b24ac06bfabee4382ee1b6d0d64ec299d18af8cb4c411fc804062c0813e630c50b
- MD5 SHA1 SHA512
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Suspicious use of SetThreadContext