General
- Target DBS_Bank_ Payment Copy_Pdf.exe
- Size 38KB
- Sample220114-m8j9csgaep
- SHA256 77a2859ef248804ae58920aa53cbdae4dcf7296c0ef7dcd2397014bd5b9bed3f
- MD5 286d4c71e16196ee05d2fc1350141e3e
- SHA1 0d66a22ae06ff01f76d752da1593a785dc8d2363
- SHA512 1a276a2b2e53a0fad48563211288eafc9b93255b11f75d5306d772fea9c74bd23fe875fc5d1090fcfad129ca90e01a54202806f68587a9055872fa11a1ab9ef8
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DBS_Bank_ Payment Copy_Pdf.exe
Resource
win7-en-20211208
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
DBS_Bank_ Payment Copy_Pdf.exe
Resource
win10-en-20211208
0 signatures
0 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
mail.meyaargroup.com
-
Port
587
-
Username
-
Password
Meyaar@123$
Targets
-
- Target DBS_Bank_ Payment Copy_Pdf.exe
- Size 38KB
- SHA256 77a2859ef248804ae58920aa53cbdae4dcf7296c0ef7dcd2397014bd5b9bed3f
- MD5 286d4c71e16196ee05d2fc1350141e3e
- SHA1 0d66a22ae06ff01f76d752da1593a785dc8d2363
- SHA512 1a276a2b2e53a0fad48563211288eafc9b93255b11f75d5306d772fea9c74bd23fe875fc5d1090fcfad129ca90e01a54202806f68587a9055872fa11a1ab9ef8
- MD5 SHA1 SHA512
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Suspicious use of SetThreadContext