General
-
Target
Price list.rar
-
Size
87KB
-
Sample
211021-d97llsafgl
-
MD5
4565679ce2e5f626299ec3005b7de290
-
SHA1
229081d7951dce11d9fa3e4eae9efb16171b2f54
-
SHA256
5e13a9931f6d3fc62308b2d7b1b6386a5e7899eea1c7a698f3b76e59f85d6316
-
SHA512
986c1ab2dd0916b43712cf3c23dfc960e2aaeba4618db2902eefe5454878064a2113c237e8d6cef59b9a42d7c067982431db507e874cb0cc215896daa1506843
Static task
static1
Behavioral task
behavioral1
Sample
Price list..exe
Resource
win7-en-20210920
Behavioral task
behavioral2
Sample
Price list..exe
Resource
win10-en-20211014
Malware Config
Extracted
agenttesla
Protocol: smtp- Host:
mail.sodag-agricole.com - Port:
587 - Username:
[email protected] - Password:
agricole**sodag+1990
Targets
-
-
Target
Price list..exe
-
Size
215KB
-
MD5
2a64d99a0646419345e02e37dd7f6ff7
-
SHA1
c0740347f9a3694fb99dbfd5f736960b8abdd12c
-
SHA256
b720d19f181fde475d7ad19e5f623ed17bae905ede9826ae9033ad9f36b0557f
-
SHA512
58a8abd03f8abe9185218dcce197a4ed0ca465a306c8ca926b6e5a0b5d0ac8d9d97a0fe701b6f6e2d00e34339decda48d84a9057b457243333953faf25228b36
Score7/10-
Accesses Microsoft Outlook profiles
-
Adds Run key to start application
-