General
- Target Shipment Document BL-INV and Packing List Attached.exe
- Size 856KB
- Sample220125-r36bvshbep
- SHA256 d55011272b280ef3806dc8ea48a9e60780d6afbcd1a296f482fa2860164b790b
- MD5 6b1e07b79a69d0f89c93d6955b93b19e
- SHA1 db8a63cc1caec420208f95d173803fecd2910a10
- SHA512 815725167a0f34b516286b48118a3f3d89a237fb29c1fb4af0acc21ee8510dccfaf5fdbcac14c298ebb17c57aff05a907131cdbf9f3c245631b73904e3d4f43b
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
Shipment Document BL-INV and Packing List Attached.exe
Resource
win7-en-20211208
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
Shipment Document BL-INV and Packing List Attached.exe
Resource
win10-en-20211208
0 signatures
0 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
atruismint.com
-
Port
587
-
Username
-
Password
Atruism@062
Targets
-
- Target Shipment Document BL-INV and Packing List Attached.exe
- Size 856KB
- SHA256 d55011272b280ef3806dc8ea48a9e60780d6afbcd1a296f482fa2860164b790b
- MD5 6b1e07b79a69d0f89c93d6955b93b19e
- SHA1 db8a63cc1caec420208f95d173803fecd2910a10
- SHA512 815725167a0f34b516286b48118a3f3d89a237fb29c1fb4af0acc21ee8510dccfaf5fdbcac14c298ebb17c57aff05a907131cdbf9f3c245631b73904e3d4f43b
- MD5 SHA1 SHA512
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Suspicious use of SetThreadContext