General
- Target DUBAI UAE 34GHED.exe
- Size 649KB
- Sample220131-j7arrahdh6
- SHA256 c1775805532530f23ebd9df5cfcd3b1b4bbfd740271fae4f30d398cff129691b
- MD5 fb0cbc6cd404ca6d28065552612a4d48
- SHA1 bbe4e01491074f78c54b13f54eface7b6bfab381
- SHA512 d09de59c5d41155093b44cbb8140497e8e48038ef439519f51edabb22127585c2bcc6324ea6dc5a1da99a78297ad91407fda871f0903813ab2a8f97a382a7616
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DUBAI UAE 34GHED.exe
Resource
win7-en-20211208
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
DUBAI UAE 34GHED.exe
Resource
win10-en-20211208
0 signatures
0 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
mail.myremediez.com
-
Port
587
-
Username
-
Password
123123456
-
Email to
Targets
-
- Target DUBAI UAE 34GHED.exe
- Size 649KB
- SHA256 c1775805532530f23ebd9df5cfcd3b1b4bbfd740271fae4f30d398cff129691b
- MD5 fb0cbc6cd404ca6d28065552612a4d48
- SHA1 bbe4e01491074f78c54b13f54eface7b6bfab381
- SHA512 d09de59c5d41155093b44cbb8140497e8e48038ef439519f51edabb22127585c2bcc6324ea6dc5a1da99a78297ad91407fda871f0903813ab2a8f97a382a7616
- MD5 SHA1 SHA512
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Suspicious use of SetThreadContext