Static task
static1
Behavioral task
behavioral1
Sample
Price list..exe
Resource
win7-en-20210920
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
Price list..exe
Resource
win10-en-20211014
0 signatures
0 seconds
General
-
Target
Price list.rar
-
Size
87KB
-
MD5
4565679ce2e5f626299ec3005b7de290
-
SHA1
229081d7951dce11d9fa3e4eae9efb16171b2f54
-
SHA256
5e13a9931f6d3fc62308b2d7b1b6386a5e7899eea1c7a698f3b76e59f85d6316
-
SHA512
986c1ab2dd0916b43712cf3c23dfc960e2aaeba4618db2902eefe5454878064a2113c237e8d6cef59b9a42d7c067982431db507e874cb0cc215896daa1506843
Score
10/10
Malware Config
Extracted
Family
agenttesla
Credentials
Protocol: smtp- Host:
mail.sodag-agricole.com - Port:
587 - Username:
[email protected] - Password:
agricole**sodag+1990
Signatures
-
AgentTesla Payload 1 IoCs
Processes:
resource yara_rule static1/unpack001/Price list..exe family_agenttesla -
Agenttesla family
Files
-
Price list.rar.rar
-
Price list..exe.exe windows x86