General
- Target 3da3ed8b0ffc7e65d27985cb744d2e81
- Size 750KB
- Sample211005-ql86raabgm
- SHA256 fe8b552d0266feb1b3ef94bb39209fc1253295865d8f49a2f6cb6a3f68271c7c
- MD5 3da3ed8b0ffc7e65d27985cb744d2e81
- SHA1 adfec0b63f267d3891ef085a69b78cc46951c909
- SHA512 a49cc6395d5c07209fed407225d19f62e8867e5bb97fe8c2724f967a2654a524e08830a8662360c98a9c1c63445253a8024b023494fc82b68510940515195140
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
3da3ed8b0ffc7e65d27985cb744d2e81.exe
Resource
win7-en-20210920
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
3da3ed8b0ffc7e65d27985cb744d2e81.exe
Resource
win10v20210408
0 signatures
0 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
nl-s1.dedicatedpanel.net
-
Port
587
-
Username
-
Password
bigmoney119
Targets
-
- Target 3da3ed8b0ffc7e65d27985cb744d2e81
- Size 750KB
- SHA256 fe8b552d0266feb1b3ef94bb39209fc1253295865d8f49a2f6cb6a3f68271c7c
- MD5 3da3ed8b0ffc7e65d27985cb744d2e81
- SHA1 adfec0b63f267d3891ef085a69b78cc46951c909
- SHA512 a49cc6395d5c07209fed407225d19f62e8867e5bb97fe8c2724f967a2654a524e08830a8662360c98a9c1c63445253a8024b023494fc82b68510940515195140
- MD5 SHA1 SHA512
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Suspicious use of SetThreadContext